skills/ryneivy/skills/crawl/Gen Agent Trust Hub

crawl

Pass

Audited by Gen Agent Trust Hub on Mar 9, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill connects to the api.inspiro.top domain to retrieve web content as specified by the user's input.\n- [COMMAND_EXECUTION]: The script scripts/crawl.sh executes common system binaries including curl for API communication and jq for parsing JSON responses. It also performs filesystem operations such as mkdir and echo to save the results.\n- [DATA_EXFILTRATION]: No evidence of sensitive data theft was found. The script utilizes the INSPIRO_API_KEY exclusively to authenticate with the intended service for the skill's primary function.\n- [PROMPT_INJECTION]: The skill ingests untrusted content from external websites which could serve as a vector for indirect prompt injection.\n
  • Ingestion points: Website data is retrieved via the crawl endpoint from user-supplied URLs in scripts/crawl.sh.\n
  • Boundary markers: None. Content from external pages is written directly to local markdown files without specialized delimiters or instructions for the AI agent.\n
  • Capability inventory: The skill has the capability to create directories and write files to the local filesystem.\n
  • Sanitization: The script performs basic sanitization of filenames using sed and cut to remove protocols and replace special characters with underscores, mitigating path traversal attacks.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 9, 2026, 03:38 PM