scrapling-official

Pass

Audited by Gen Agent Trust Hub on May 11, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides documentation and examples for using the 'scrapling' library, which is a legitimate web scraping framework. No malicious behavior, obfuscation, or unauthorized access attempts were detected within the skill's instructions or example code.
  • [EXTERNAL_DOWNLOADS]: The skill guides users to install the 'scrapling' Python package via pip and download browser dependencies using scrapling install --force. These are standard functional requirements for the library's browser-based scraping capabilities and are sourced from the vendor's official repositories.
  • [DATA_EXFILTRATION]: Although the skill is designed to fetch data from external websites, it implements SSRF (Server-Side Request Forgery) protections by default. The follow_redirects parameter defaults to a 'safe' mode that rejects redirects to internal or private IP addresses.
  • [INDIRECT_PROMPT_INJECTION]: The skill explicitly addresses the risk of indirect prompt injection. It includes a mandatory --ai-targeted flag for CLI commands and detailed sanitization logic in its MCP server (stripping hidden elements, templates, and zero-width characters) to ensure that scraped content is safe for AI consumption.
Audit Metadata
Risk Level
SAFE
Analyzed
May 11, 2026, 09:57 PM