scraper-builder

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill scaffolds projects designed to ingest and process untrusted data from external websites, which is an inherent surface for indirect prompt injection.
  • Ingestion points: Generated scrape() methods in PageObject classes ingest HTML and text content from user-specified target URLs.
  • Boundary markers: The skill mandates the use of Zod schemas to validate and delimit extracted data before it is written to storage.
  • Capability inventory: Scrapers have network access via Playwright and file system write access for saving JSON/CSV data and debug screenshots.
  • Sanitization: Data extraction templates include Zod transformation logic to clean and validate strings, such as price parsing and URL validation.
  • [COMMAND_EXECUTION]: The skill includes Deno utility scripts that perform automated file system operations to generate project code.
  • The scaffold-scraper-project.ts and generate-page-object.ts scripts use Deno's file system APIs to create directories and write TypeScript source files and configuration manifests.
  • [EXTERNAL_DOWNLOADS]: The skill references and facilitates the installation of the agent-browser CLI tool from Vercel Labs' official repository.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 01:07 PM