scrape-any-website
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands to verify the environment and list available tools.
- Evidence:
clay whoami; echo "exit_code=$?"andclay workflows actions listare used in Step 0 ofSKILL.mdto confirm the installation and workspace status. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from arbitrary external URLs, creating a vulnerability surface where malicious content on a target website could attempt to influence the agent's behavior.
- Ingestion points: External websites defined by the "target" URL input in
SKILL.md(Step 1). - Boundary markers: Absent. The instructions do not specify the use of delimiters to isolate scraped content from instructions.
- Capability inventory: The agent has capabilities for CLI command execution (
clay), network access via scraping tools (http-api-v2,scrape-website,zenrows-run-scrape), and local file read/write operations for configuration sheets. - Sanitization: Absent. The skill does not mention sanitizing or escaping the data fetched from external sources before presenting it to the user or agent context.
Audit Metadata