scraperapi-python-sdk
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [SAFE]: Secret Management. The skill correctly implements os.environ for handling the SCRAPERAPI_API_KEY environment variable, which prevents the unsafe practice of hardcoding sensitive credentials in source code.
- [EXTERNAL_DOWNLOADS]: Package Dependencies. The documentation references the installation of the official scraperapi-sdk package and the use of the well-known requests library. These are standard resources for the service provided.
- [SAFE]: External Communications. All demonstrated network operations, including synchronous scraping and asynchronous job management, target vendor-controlled domains such as api.scraperapi.com and async.scraperapi.com.
- [PROMPT_INJECTION]: Indirect Prompt Injection Surface. The skill enables the ingestion of content from arbitrary external websites. Ingestion points: Scraped content from URLs provided to SDK/request methods. Boundary markers: None. Capability inventory: SDK and requests-based network communication. Sanitization: No content validation is shown. Users should be aware that data retrieved from the web may contain malicious instructions targeting the agent.
Audit Metadata