web-fetch-as-markdown
Pass
Audited by Gen Agent Trust Hub on Apr 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches web content by routing requests through Cloudflare's markdown conversion service and Jina AI's Reader API.
- [DATA_EXFILTRATION]: Instructions specify sending URLs to third-party conversion services. The skill includes a proactive disclosure regarding data transparency and advises the agent to avoid fetching pages containing sensitive authentication tokens in the URL.
- [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection by design, as it ingests content from untrusted external websites.
- Ingestion points: Content retrieved from external URLs via markdown conversion services as described in SKILL.md.
- Boundary markers: Not specified; the instructions do not define specific delimiters for the fetched content when presented to the agent.
- Capability inventory: The agent uses the
WebFetchtool to acquire data and is intended to parse and extract information from the resulting Markdown. - Sanitization: No explicit instructions for sanitizing or escaping the fetched content are provided, though the use of conversion services naturally strips some HTML-based vectors.
Audit Metadata