Jina Web Fetcher - 网页抓取

• Outcome: Pass
• Latest audit: May 28, 2026, 9:37 AM
• Version:
  1.0.0

Overview

This is a simple web-fetch helper that sends requested URLs to Jina AI, so it has privacy cautions but no hidden install, persistence, credentials, or destructive behavior.

Install only if you are comfortable sending target URLs, query strings, search terms, and fetched page content to Jina AI. Do not use it with localhost, private intranet hosts, cloud metadata endpoints, authenticated pages, or links containing secrets or tokens.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 97% confidence
• Finding: The skill instructs users to send arbitrary URLs and Google search queries through the external Jina AI proxy service without warning that those URLs and query terms are disclosed to a third party. This can expose sensitive targets, internal URLs, search intent, or proprietary research terms, and the broad 'support arbitrary URL' context makes the omission more dangerous because users may reasonably paste confidential destinations.

VirusTotal

66/66 vendors flagged this skill as clean.