just-scrape

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill includes examples that embed secrets verbatim in CLI flags/arguments (cookies, Authorization header, and a plaintext "Fill password" step), which would require an LLM to include secret values directly in generated commands or outputs.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s required workflow ingests outsider-authored free text at runtime when users run scraping commands (e.g., smart-scraper <url> -p <prompt>, search-scraper <prompt>, crawl <url> -p <prompt>, markdownify <url>) that fetch and process arbitrary webpage content or search results chosen by the user.