scraper-builder
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill scaffolds projects designed to ingest and process untrusted data from external websites, which is an inherent surface for indirect prompt injection.
- Ingestion points: Generated
scrape()methods in PageObject classes ingest HTML and text content from user-specified target URLs. - Boundary markers: The skill mandates the use of Zod schemas to validate and delimit extracted data before it is written to storage.
- Capability inventory: Scrapers have network access via Playwright and file system write access for saving JSON/CSV data and debug screenshots.
- Sanitization: Data extraction templates include Zod transformation logic to clean and validate strings, such as price parsing and URL validation.
- [COMMAND_EXECUTION]: The skill includes Deno utility scripts that perform automated file system operations to generate project code.
- The
scaffold-scraper-project.tsandgenerate-page-object.tsscripts use Deno's file system APIs to create directories and write TypeScript source files and configuration manifests. - [EXTERNAL_DOWNLOADS]: The skill references and facilitates the installation of the
agent-browserCLI tool from Vercel Labs' official repository.
Audit Metadata