url-to-markdown
Pass
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill communicates with the PageWatch API at
https://pagelens.devto perform web scraping, screenshots, and PDF generation. This is the primary intended functionality of the skill. - [PROMPT_INJECTION]: As a tool that fetches content from external URLs, it presents an indirect prompt injection surface. Content from remote websites is returned to the agent context as markdown, which could potentially contain instructions intended to influence agent behavior. However, the skill lacks exploitable capabilities (such as arbitrary code execution or filesystem write access) that would allow such an injection to escalate beyond text-based manipulation.
- [SAFE]: Authentication tokens are stored locally in
~/.config/pagewatch/tokenusing secure file permissions (mode 0600), preventing other users on the system from accessing the agent's credentials. The skill also requires manual human intervention (email confirmation) to activate trial credits, providing a clear boundary for usage.
Audit Metadata