crawlbrulee-cli

Pass

Audited by Gen Agent Trust Hub on Sep 21, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill facilitates the retrieval of content from arbitrary external URLs using the crawlbrulee scrape url command. This content is then ingested into the agent's context for processing. Ingestion points: The output of the crawlbrulee scraping tool (Markdown, HTML, etc.) is read by the agent. Boundary markers: The skill does not define specific delimiters or instructions to treat the scraped content as untrusted data, which could lead to the agent following instructions embedded in the target web pages. Capability inventory: The agent is granted permission to use the Bash tool for executing crawlbrulee commands. Sanitization: There are no explicit instructions for sanitizing the scraped data before it is presented to the LLM.
  • [EXTERNAL_DOWNLOADS]: The skill references the installation and execution of the crawlbrulee package via npm and npx. This represents standard behavior for accessing the vendor's provided CLI tools.
  • [COMMAND_EXECUTION]: The skill uses the Bash tool to interact with the system shell. Execution is constrained by the allowed-tools configuration to specific crawlbrulee and npx commands.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 21, 2026, 07:51 PM