website-scraping
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process unstructured data from external websites, which inherently creates a surface for indirect prompt injection.
- Ingestion points: External URLs fetched via
urllib,requests, orplaywright(referenced inSKILL.md,scripts/recon.py, andexamples/explore.py). - Boundary markers: The skill explicitly identifies this risk in
SKILL.md(Step 6, 0a) andreferences/scrapling.md(Concept 1), advising users to strip hidden elements before passing content to an LLM. - Capability inventory: The skill uses standard network libraries and browser automation tools to fetch content.
- Sanitization: A dedicated sanitization function
sanitize_for_llmis provided inreferences/scrapling.mdto removescript,style,template, andhiddenelements. - [COMMAND_EXECUTION]: The documentation provides instructions for standard development environment setup, such as installing browser drivers via
playwright installand package management viapip installorgit clone. - [EXTERNAL_DOWNLOADS]: The skill references and provides instructions for downloading established tools and libraries. This includes Microsoft's Webwright framework from its official GitHub repository and various well-known scraping and parsing libraries like
scrapling,playwright-stealth, andreadability-lxml. These are documented as standard implementation details for the scraping workflow.
Audit Metadata