webscrapingai

Pass

Audited by Gen Agent Trust Hub on Sep 23, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install and use the Membrane CLI (@membranehq/cli) via NPM and npx. These resources are hosted on a well-known registry and are official tools provided by the vendor for interacting with their platform.
  • [COMMAND_EXECUTION]: The instructions direct the AI agent to execute shell commands using the membrane CLI to manage connections, discover actions, and perform web scraping tasks. This is the intended operational mode for this skill.
  • [INDIRECT_PROMPT_INJECTION]: The skill's primary purpose is to ingest and process data from external websites via scraping.
  • Ingestion points: Data retrieved from external web pages via the scrape and extraction actions in SKILL.md.
  • Boundary markers: None explicitly defined in the instructions to separate untrusted web content from agent instructions.
  • Capability inventory: The agent has the ability to execute shell commands and perform network requests via the Membrane proxy as described in SKILL.md.
  • Sanitization: There are no instructions provided for sanitizing or validating the content scraped from the web before the agent processes it.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 23, 2026, 02:37 AM