scrapingant-web-fetch

SUSPICIOUS. The core behavior is largely coherent with the stated purpose: it uses ScrapingAnt's official hosted MCP/REST endpoints, requires only the vendor API key, and does not contain obvious malware patterns or unverified binary installs. However, it routes browsing requests and credentials through a third-party hosted MCP service, uses anti-bot/proxy bypass features, and imports untrusted web content into an agent that also has write/exec-capable tools. The unseen helper script prevents a fully benign classification.