zyte-api
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on the
@useclawlink/clitool to perform all operations, including authentication and Zyte API interactions. This is standard behavior for tools provided by the author. - [EXTERNAL_DOWNLOADS]: The skill uses
npxto fetch and execute the@useclawlink/clipackage from the NPM registry. This package is provided by the skill author. - [INDIRECT_PROMPT_INJECTION]: The skill scrapes web data via Zyte API, exposing the agent to potentially malicious instructions in external content. 1. Ingestion points: Scraped data from
zyte_api_extract_zyte_apiinSKILL.md. 2. Boundary markers: None present. 3. Capability inventory: CLI execution via the ClawLink tool as described inSKILL.md. 4. Sanitization: None mentioned.
Audit Metadata