urlscan

Submit URLs to urlscan.io and return safety verdicts with screenshots.

779|139|Updated Mar 7, 2026
One-click install
npx skills add https://github.com/taracodlabs/aiden --skill urlscan
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: urlscan
Source: https://github.com/taracodlabs/aiden/tree/main/skills/urlscan
Command: npx skills add https://github.com/taracodlabs/aiden --skill urlscan

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

URL safety assessment by submitting URLs to urlscan.io to obtain a safety verdict, metadata, and a screenshot.

Core Features & Use Cases

  • Submit URLs for safety analysis and get structured verdicts, IP, country, and visual evidence.
  • Use cases include security reviews of suspicious links, OSINT investigations, and automated link-safety checks in workflows.

Quick Start

Submit a URL for analysis using the skill and view the returned verdict and screenshot.

Frequently Asked Questions about urlscan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check if a URL is safe before clicking it?

To check if a URL is safe, you can submit it for analysis to obtain a safety verdict, metadata, and a screenshot. This process evaluates potentially unsafe links and returns structured threat intelligence results.

What is the best way to automate URL safety checks for user-shared links?

Automating URL safety checks involves submitting user-shared links to a scanning API and polling for the verdict. This workflow provides structured safety reports and visual evidence for organizational security reviews.

Can I get a screenshot of a suspicious URL for OSINT investigations?

Yes, you can obtain a screenshot of a suspicious URL during safety analysis. The scan returns structured results including a safety verdict, metadata, and a visual screenshot for OSINT investigations.

Do I need an API key to submit URLs for threat intelligence analysis?

Yes, you need a URLSCAN_API_KEY to submit URLs for threat intelligence analysis. The key is required to authenticate the scan submission and retrieve the resulting safety verdict and metadata.

How does URL analysis retrieve safety verdicts after submission?

URL analysis retrieves safety verdicts by posting the URL to a scan endpoint, then polling a separate result endpoint. This asynchronous process eventually returns the final safety verdict, metadata, and screenshot.

What metadata is returned when analyzing potentially unsafe URLs?

Analyzing potentially unsafe URLs returns metadata including the safety verdict, associated IP address, country of origin, and a screenshot. A structured report URL is also provided for detailed review.