scrapeninja
Pass
Audited by Gen Agent Trust Hub on May 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
@membranehq/clipackage from the official npm registry. This is a vendor-owned resource used to manage the integration. - [COMMAND_EXECUTION]: The skill uses the
membraneCLI to perform operations like authentication and action execution. These commands are part of the intended functionality for the platform integration. - [SAFE]: The skill follows security best practices by instructing the agent never to ask the user for API keys or tokens, instead delegating authentication to the Membrane platform's server-side connection manager.
- [PROMPT_INJECTION]: The skill has an indirect prompt injection surface as it ingests untrusted web data via ScrapeNinja.
- Ingestion points: Web data retrieved via
membrane action runas described inSKILL.md. - Boundary markers: None explicitly defined.
- Capability inventory:
membrane action createandmembrane action runcommands inSKILL.md. - Sanitization: None explicitly mentioned; relies on the agent's internal safety filters and platform managed environment.
Audit Metadata