scrape
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on executing bash commands for its primary functionality. It uses a tool named
$Bfor browser interactions (listing, showing, and running scraping scripts) and a local binary at~/.claude/skills/gstack/bin/gstack-learnings-logto record architectural insights and patterns discovered during the session. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted data from external websites.
- Ingestion points: Web content is retrieved through
$B html,$B snapshot, and$B textcommands within the 'Prototype phase' described inSKILL.md. - Boundary markers: There are no explicit instructions or delimiters defined to prevent the agent from following instructions that might be embedded in the scraped HTML or text.
- Capability inventory: The skill utilizes the
Bashtool to perform network operations (via$B) and to execute local logging scripts. - Sanitization: The instructions do not specify any sanitization or validation of the retrieved web content before it is parsed by the agent to generate a JSON response.
Audit Metadata