scrapfly-browser

Pass

Audited by Gen Agent Trust Hub on Oct 22, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides standard integration instructions for Scrapfly's Cloud Browser API. No malicious patterns such as exfiltration, obfuscation, or unauthorized command execution were found.- [DATA_EXPOSURE]: Authentication is handled via the SCRAPFLY_API_KEY environment variable or connection parameters, which follows standard API integration practices.- [COMMAND_EXECUTION]: The skill includes a standard installation command for the Playwright library (pip install playwright).- [INDIRECT_PROMPT_INJECTION]: The skill provides capabilities to read content from external websites. While this introduces an attack surface where an agent could encounter malicious instructions in third-party content, the skill itself does not facilitate the execution of such instructions and behaves as a standard web automation tool.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 22, 2026, 04:05 PM