review-scraper
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from external review platforms which could contain malicious instructions designed to influence the agent's behavior.
- Ingestion points: The script
scripts/scrape_reviews.pyretrieves review data including titles and body text from Apify datasets. - Boundary markers: No explicit boundary markers or instructions are provided to the agent to treat the scraped content as untrusted data.
- Capability inventory: The skill utilizes the
requestslibrary for network communication with the Apify API. - Sanitization: Scraped review text is normalized and filtered but not sanitized or escaped before being returned to the agent context.
- [EXTERNAL_DOWNLOADS]: The skill depends on the
requestsPython package and communicates with the Apify API atapi.apify.com, which is a well-known service for web scraping.
Audit Metadata