crawlbrulee-cli
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the retrieval of content from arbitrary external URLs using the
crawlbrulee scrape urlcommand. This content is then ingested into the agent's context for processing. Ingestion points: The output of thecrawlbruleescraping tool (Markdown, HTML, etc.) is read by the agent. Boundary markers: The skill does not define specific delimiters or instructions to treat the scraped content as untrusted data, which could lead to the agent following instructions embedded in the target web pages. Capability inventory: The agent is granted permission to use theBashtool for executingcrawlbruleecommands. Sanitization: There are no explicit instructions for sanitizing the scraped data before it is presented to the LLM. - [EXTERNAL_DOWNLOADS]: The skill references the installation and execution of the
crawlbruleepackage vianpmandnpx. This represents standard behavior for accessing the vendor's provided CLI tools. - [COMMAND_EXECUTION]: The skill uses the
Bashtool to interact with the system shell. Execution is constrained by theallowed-toolsconfiguration to specificcrawlbruleeandnpxcommands.
Audit Metadata