scrapecreators-api
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the retrieval of untrusted data from various social media platforms which could contain malicious instructions.
- Ingestion points: Public profiles, posts, comments, and transcripts from platforms like Instagram, TikTok, and YouTube (SKILL.md).
- Boundary markers: The skill specifies an 'Output contract' requiring data to be returned in a structured JSON format to the parent workflow.
- Capability inventory: The skill utilizes the 'call_data_provider' MCP tool or the 'gooseworks' CLI to perform network requests.
- Sanitization: The instructions do not define specific sanitization logic for the retrieved social media content before passing it to downstream skills.
- [EXTERNAL_DOWNLOADS]: The skill retrieves the official ScrapeCreators OpenAPI specification from 'docs.scrapecreators.com' to ensure endpoint accuracy.
Audit Metadata