crawlbrulee-mcp
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill configuration instructs the host to execute the
@crawlbrulee/mcppackage using thenpxcommand. This process downloads and runs the official package from the NPM registry. Since this originates from a well-known service and belongs to the skill's authoring vendor, it is considered a legitimate dependency for the skill's functionality. - [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of content from external websites via the
scrapeandmaptools, which creates a potential surface for indirect prompt injection where malicious instructions on a webpage could influence the agent's behavior. - Ingestion points: The
scrape,map, andscrape_resulttools fetch and process content from user-provided or discovered URLs. - Boundary markers: No explicit boundary markers or instructions to ignore embedded commands are defined in the skill's documentation, relying on the host environment's default handling.
- Capability inventory: The tools enable web content retrieval, site mapping (URL discovery), and support for user-defined
webhookcallbacks for asynchronous jobs. - Sanitization: The tool provides options for data sanitization, including the
cleanupparameter to remove specific HTML elements (like ads or popups) and the ability to convert output to Markdown, which helps mitigate risks associated with processing complex HTML.
Audit Metadata