scraperapi-market-research
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses ScraperAPI's remote MCP tools to fetch live web data from search engines (Google), marketplaces (Amazon, Walmart, eBay), and public URLs. These operations are performed through the vendor's own infrastructure as intended by the skill's primary purpose.
- [DATA_EXFILTRATION]: User queries and target URLs are transmitted to ScraperAPI to perform scraping and data retrieval. This transmission is a core part of the service provided by the author and is explicitly disclosed in the skill's description. No patterns of unauthorized exfiltration or access to sensitive local files were identified.
- [CREDENTIALS_UNSAFE]: The skill requires the environment variable
SCRAPERAPI_API_KEY. It follows secure practices by requesting this through standard platform configuration rather than hardcoding secrets or prompting the user to expose them in conversation. - [COMMAND_EXECUTION]: All functionality is implemented through specific MCP tool calls. There are no instances of arbitrary shell command execution, subprocess spawning, or use of the dynamic context injection (
!command) syntax.
Audit Metadata