Web Fetch as Markdown

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:41 PM UTC
• Version:
  1.2.1

Overview

This skill only instructs an agent to fetch user-requested webpages through disclosed markdown conversion services, with no installer code or persistence.

Install only if you are comfortable sending target URLs, including paths and query strings, to the listed conversion services. Do not use it for private authenticated pages or links containing tokens unless you have removed sensitive parameters or provided the content locally.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 89% confidence
• Finding: The trigger phrases are broad enough to activate on common requests like "look up" or "help me check this webpage," which can cause the skill to run in situations the user did not explicitly intend. Because the skill sends target URLs to third-party conversion services, over-broad invocation increases the chance of unintended external disclosure of user-supplied URLs or unnecessary network access.

VirusTotal

64/64 vendors flagged this skill as clean.