crawlee
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of untrusted data from external websites into the agent's context, which is an inherent property of web scraping tools.
- Ingestion points: Handlers described in
references/routing-requests.mdand crawler types inreferences/crawler-choice.mddemonstrate how to parse server-rendered HTML and JSON APIs from external URLs. - Capability inventory: The skill possesses the capability to write scraped data to the local file system (Datasets/Key-Value Stores) and initiate further network requests based on ingested content (
enqueueLinks). - Boundary markers: The skill lacks explicit instructions for the agent to ignore instructions embedded within scraped content, though it recommends the use of structured data and Zod schemas for validation in
references/storage-config.md. - Sanitization: Instructions suggest validating data shapes before storage but do not specifically address sanitizing content for potential prompt injection before LLM processing.
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for downloading and installing libraries and browser binaries from well-known registries and official sources.
- Evidence:
references/runtimes-deploy.mddetails the installation of dependencies usingbun add crawleeand the installation of browser binaries viabunx playwright install chromium. - [COMMAND_EXECUTION]: The skill involves the execution of standard developer CLI tools for running and deploying scrapers.
- Evidence:
references/runtimes-deploy.mddocuments usage ofapify run,apify push, and standard Node.js/Bun package manager commands.
Audit Metadata