baoyu-url-to-markdown
Warn
Audited by Snyk on Feb 17, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). This skill loads and renders arbitrary public URLs (scripts/main.ts launches Chrome with the user-provided and uses cleanupAndExtractScript/evaluateScript, and scripts/html-to-markdown.ts parses the page HTML) so it directly fetches and ingests untrusted third‑party web content for interpretation.
Audit Metadata