scraperapi-lead-enrichment
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill uses established ScraperAPI MCP tools to perform its primary function of lead enrichment. The tool implementation and intended use cases align with legitimate vendor functionality.
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface common to web-scraping agents. * Ingestion points: Data from the public internet is brought into the agent context via the mcp__ScraperAPI__google_search and mcp__ScraperAPI__scrape tools. * Boundary markers: The instructions do not define delimiters to separate untrusted scraped content from system instructions. * Capability inventory: The agent has access to network-enabled tools. * Sanitization: External content is fetched in raw markdown format without sanitization of potential command patterns. Note: This risk is inherent to the scraping use-case and is managed by the skill's structured stop conditions.
Audit Metadata