scrapy-web-scraping
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides instructions for building crawlers that ingest data from external, untrusted websites, which is an inherent attack surface for indirect prompt injection.
- Ingestion points: External web content processed by spiders in
myspider.py. - Boundary markers: The skill focus is on code implementation rather than prompt delimiters.
- Capability inventory: The Scrapy framework allows for extensive network requests and data persistence via pipelines.
- Sanitization: The guide mitigates risks by recommending the use of
ItemLoaderprocessors for data cleaning andValidationPipelinefor item verification before storage.
Audit Metadata