fetching-and-converting-urls

Pass

Audited by Gen Agent Trust Hub on Aug 22, 2026

Risk Level: SAFE
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill describes functionality for fetching and processing untrusted content from remote URLs. This is the primary intended purpose of the html-to-markdown tool.
  • Ingestion points: The --url flag in html-to-markdown (SKILL.md) reads content from external websites provided by the user.
  • Boundary markers: Not mentioned in the skill documentation; output is piped to standard output or a file.
  • Capability inventory: The skill utilizes a CLI tool for HTML parsing and content transformation.
  • Sanitization: Not explicitly discussed in the skill, though the tool's function is to convert and clean HTML structure.
  • [COMMAND_EXECUTION]: The skill provides examples for executing the html-to-markdown CLI. These commands use standard parameters for URL fetching and output formatting, following the expected behavior for vendor-provided tooling.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 22, 2026, 10:22 PM
Security Audit — agent-trust-hub — fetching-and-converting-urls