skills/iii-hq/workers/scrapling/Gen Agent Trust Hub

scrapling

Pass

Audited by Gen Agent Trust Hub on Jul 14, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill documentation describes an installation step (scrapling install) used to download and set up the required browser environments (Camoufox and Chromium).
  • [PROMPT_INJECTION]: The skill's primary function is to ingest data from external websites, which creates a surface for indirect prompt injection where malicious web content could attempt to influence the agent's behavior.
  • Ingestion points: The scrapling::fetch, scrapling::stealthy-fetch, and scrapling::dynamic-fetch functions retrieve HTML content from user-provided URLs.
  • Boundary markers: There are no specific mentions of delimiters or 'ignore' instructions for the fetched content.
  • Capability inventory: The skill possesses network access to arbitrary external domains.
  • Sanitization: No explicit sanitization or filtering of the remote HTML content is described.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 14, 2026, 11:31 PM
Security Audit — agent-trust-hub — scrapling