facebook-scraper-api
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from Facebook pages, posts, and comments, which could theoretically contain malicious instructions designed to influence the agent.\n
- Ingestion points: Untrusted data enters the agent context via endpoints such as
/api/v1/facebook/profile/postsand/api/v1/facebook/post/commentsas defined in SKILL.md.\n - Boundary markers: The skill does not provide explicit boundary markers or delimiters to separate ingested content from system instructions.\n
- Capability inventory: The skill performs network operations via HTTP requests to the vendor's API (
api.scavio.dev).\n - Sanitization: The documentation does not specify any sanitization, filtering, or escaping of the text content retrieved from Facebook before it is processed by the AI.
Audit Metadata