scrapfly-alerting
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill describes management of alerting thresholds and notification channels using official Scrapfly tools and APIs. All referenced domains (scrapfly.io, api.scrapfly.io) and resource patterns (scp-live-...) are standard for the vendor.- [COMMAND_EXECUTION]: Documents usage of the scrapfly CLI for alerting tasks, including alert creation, monitoring, and maintenance subcommands.- [INDIRECT_PROMPT_INJECTION]: The skill processes external inputs such as project names, target domains, and webhook URLs, which constitutes an attack surface.
- Ingestion points: User-provided parameters in alert configuration tools and CLI flags.
- Boundary markers: Implements a dry-run confirmation pattern requiring an explicit confirm=true parameter or interactive confirmation before persisting changes.
- Capability inventory: Includes network communication with the Scrapfly API, configuration of external webhook targets, and execution of CLI subcommands.
- Sanitization: Employs server-side validation of metrics and dimensions as documented in the common error codes section.
Audit Metadata