builtwith
Pass
Audited by Gen Agent Trust Hub on Jun 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill makes requests to official BuiltWith API endpoints (
https://api.builtwith.com) to retrieve technology stack information. - [COMMAND_EXECUTION]: The skill uses
curlto interact with the BuiltWith API. Parameters are passed using environment variables ($BUILTWITH_TOKEN) and URL encoding is utilized, which is a secure method for handling API authentication. - [INDIRECT_PROMPT_INJECTION]: As the skill retrieves and processes external technology profile data from the BuiltWith API, there is a theoretical surface for indirect prompt injection if the API response contains malicious content. However, this is a standard risk for any skill that processes external data and is mitigated by the structured nature of the JSON response.
Audit Metadata