crawlbrulee-scrape
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFECREDENTIALS_UNSAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists of documentation for an API contract and contains no executable code or malicious instructions.
- [CREDENTIALS_UNSAFE]: The skill uses environment variable placeholders ($CRAWLBRULEE_API_KEY) for authentication, which is the recommended method for preventing hardcoded secret exposure.
- [INDIRECT_PROMPT_INJECTION]: The skill describes functionality for fetching external web content (Ingestion point: url field; Capability: returns markdown and HTML; Sanitization: optional cleanup for ads and popups). While this creates an indirect prompt injection surface, it is inherent to the scraping purpose and does not represent a flaw in the skill itself.
Audit Metadata