crawl-budget
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external websites which could contain malicious instructions targeting the AI agent.\n
- Ingestion points: The
webfetchtool is used to pull content from/robots.txt,/sitemap.xml, and various faceted listing pages as described in theData pullssection ofSKILL.md.\n - Boundary markers: None. The instructions do not specify the use of delimiters or 'ignore' commands for the content fetched by
webfetch.\n - Capability inventory: The skill executes Python scripts (
scripts/dfs_client.pyandscripts/report_publish.py) and generates reports based on the ingested data.\n - Sanitization: None. The process lacks validation or escaping steps for the external data before it is processed by the agent or the included scripts.\n- [COMMAND_EXECUTION]: The skill instructs the agent to execute specific local Python scripts to perform analysis and generate reports.\n
- Evidence:
python scripts/dfs_client.py onpage --url https://example.com --pretty\n - Evidence:
python scripts/report_publish.py <report>.md
Audit Metadata