scrapling-official
Pass
Audited by Gen Agent Trust Hub on May 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and examples for using the 'scrapling' library, which is a legitimate web scraping framework. No malicious behavior, obfuscation, or unauthorized access attempts were detected within the skill's instructions or example code.
- [EXTERNAL_DOWNLOADS]: The skill guides users to install the 'scrapling' Python package via pip and download browser dependencies using
scrapling install --force. These are standard functional requirements for the library's browser-based scraping capabilities and are sourced from the vendor's official repositories. - [DATA_EXFILTRATION]: Although the skill is designed to fetch data from external websites, it implements SSRF (Server-Side Request Forgery) protections by default. The
follow_redirectsparameter defaults to a 'safe' mode that rejects redirects to internal or private IP addresses. - [INDIRECT_PROMPT_INJECTION]: The skill explicitly addresses the risk of indirect prompt injection. It includes a mandatory
--ai-targetedflag for CLI commands and detailed sanitization logic in its MCP server (stripping hidden elements, templates, and zero-width characters) to ensure that scraped content is safe for AI consumption.
Audit Metadata