crawlbrulee-sdk-js
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of untrusted content from external websites into the agent's context via the scraping methods. \n
- Ingestion points: Untrusted data enters the context through the results of
cb.scrape(), specifically fields likepage.markdownandpage.metadatainSKILL.md. \n - Boundary markers: The documentation does not specify or demonstrate the use of delimiters or safety instructions to prevent the agent from executing instructions found in the scraped content. \n
- Capability inventory: The skill enables the agent to fetch, read, and process arbitrary web content, which could contain malicious prompts. \n
- Sanitization: There is no evidence of content sanitization or validation before the data is processed by the agent. \n- [EXTERNAL_DOWNLOADS]: The skill includes instructions for installing the official
@crawlbrulee/sdkpackage from the npm registry.
Audit Metadata