blog-scraper

Pass

Audited by Gen Agent Trust Hub on Oct 2, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill performs legitimate blog scraping activities, discovering and parsing RSS/Atom feeds using the standard Python library and the well-known Apify service.
  • [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it ingests untrusted content from external blog URLs and RSS feeds. However, the risk is negligible because the skill lacks dangerous capabilities such as file system writing, subprocess execution, or dynamic code evaluation.
  • Ingestion points: The scrape_rss and scrape_apify functions in scripts/scrape_blogs.py fetch data from external URLs.
  • Boundary markers: The output is strictly formatted as JSON or a text-based summary table.
  • Capability inventory: The script is limited to network reads and printing results to standard output; no high-privilege operations are present.
  • Sanitization: Content is treated as data for display/aggregation only.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 2, 2026, 07:11 PM