scrapling
Pass
Audited by Gen Agent Trust Hub on Jul 14, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill documentation describes an installation step (
scrapling install) used to download and set up the required browser environments (Camoufox and Chromium). - [PROMPT_INJECTION]: The skill's primary function is to ingest data from external websites, which creates a surface for indirect prompt injection where malicious web content could attempt to influence the agent's behavior.
- Ingestion points: The
scrapling::fetch,scrapling::stealthy-fetch, andscrapling::dynamic-fetchfunctions retrieve HTML content from user-provided URLs. - Boundary markers: There are no specific mentions of delimiters or 'ignore' instructions for the fetched content.
- Capability inventory: The skill possesses network access to arbitrary external domains.
- Sanitization: No explicit sanitization or filtering of the remote HTML content is described.
Audit Metadata