skills/mukul975/anthropic-cybersecurity-skills/analyzing-malicious-url-with-urlscan/Gen Agent Trust Hub
analyzing-malicious-url-with-urlscan
Pass
Audited by Gen Agent Trust Hub on Mar 15, 2026
Risk Level: SAFEPROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
- [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection because it ingests and processes untrusted data from external websites.\n
- Ingestion points:
scripts/agent.pyandscripts/process.pyretrieve data such as page titles, DOM content, and server headers from the URLScan.io API results.\n - Boundary markers: No explicit delimiters or boundary markers are used to isolate untrusted web content from the agent's prompt context.\n
- Capability inventory: The skill possesses the capability to perform network requests (
requestslibrary) and write analysis reports to the local file system.\n - Sanitization: The skill lacks sanitization, escaping, or filtering of the retrieved web content before it is processed or displayed by the agent.\n- [DATA_EXFILTRATION]: The skill transmits data to external services for analysis.\n
- It connects to
urlscan.ioandvirustotal.com, which are well-known security intelligence platforms.\n - The transmission of URLs to these services is the core function of the skill and aligns with its documented purpose.
Audit Metadata