bright-data-best-practices
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of data from arbitrary, untrusted external websites via specialized web scraping and browser automation tools.
- Ingestion points: External data enters the agent's context through HTTP response bodies (e.g.,
requests.post().text) and browser content captures (page.content()) as demonstrated inSKILL.mdand the reference documentation. - Boundary markers: The provided code patterns do not implement delimiters or specific instructions for the agent to ignore instructions that might be embedded within the scraped HTML or JSON content.
- Capability inventory: The skill outlines methods for executing network requests, proxy routing, and full browser automation using Playwright, Puppeteer, and Selenium.
- Sanitization: No sanitization, validation, or filtering of the extracted content is mentioned or implemented before the data is processed by the agent.
Audit Metadata