http-fetch

Pass

Audited by Gen Agent Trust Hub on Aug 1, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements a standard HTTP client utility using Python's built-in urllib library. It includes appropriate security checks such as restricting protocols to http:// and https:// to prevent file-system access or other protocol-based attacks.
  • [SAFE]: The code correctly handles response truncation via the max-bytes parameter, preventing memory exhaustion attacks from large remote payloads.
  • [SAFE]: The skill uses urllib.request.Request without custom header injection capabilities, reducing the risk of header-based exploitation. All external interactions are driven by the operator-supplied URL.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 1, 2026, 09:26 AM
Security Audit — agent-trust-hub — http-fetch