webscrapingai
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install and use the Membrane CLI (
@membranehq/cli) via NPM and npx. These resources are hosted on a well-known registry and are official tools provided by the vendor for interacting with their platform. - [COMMAND_EXECUTION]: The instructions direct the AI agent to execute shell commands using the
membraneCLI to manage connections, discover actions, and perform web scraping tasks. This is the intended operational mode for this skill. - [INDIRECT_PROMPT_INJECTION]: The skill's primary purpose is to ingest and process data from external websites via scraping.
- Ingestion points: Data retrieved from external web pages via the
scrapeandextractionactions inSKILL.md. - Boundary markers: None explicitly defined in the instructions to separate untrusted web content from agent instructions.
- Capability inventory: The agent has the ability to execute shell commands and perform network requests via the Membrane proxy as described in
SKILL.md. - Sanitization: There are no instructions provided for sanitizing or validating the content scraped from the web before the agent processes it.
Audit Metadata