link-auditor

Pass

Audited by Gen Agent Trust Hub on Apr 1, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements a link auditing pipeline for Hugo sites as described. It extracts links, calculates graph metrics (orphans, hubs, etc.), and validates link existence. All operations are consistent with the stated purpose.
  • [COMMAND_EXECUTION]: The skill uses tools like Grep and Bash for file system operations and link extraction. These are used in a controlled manner within the Hugo project directory.
  • [EXTERNAL_DOWNLOADS]: The scripts/link_scanner.py script performs network requests using the urllib library to validate external URLs found in the markdown content. This is an optional feature triggered by a flag and includes logic to handle known bot-blocking sites neutrally.
  • [DATA_EXFILTRATION]: No data exfiltration was detected. Network activity is limited to HTTP HEAD/GET requests for link validation, and no sensitive local data is sent to external servers.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes markdown files provided by the user. While this represents a data ingestion surface, the logic is limited to extracting link patterns and generating a report. The instructions explicitly forbid the agent from modifying content files without user review, mitigating the risk of automated exploitation via injected instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 1, 2026, 05:55 AM