scrapfly-cli
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill describes tools like
scrapfly agentandscrapfly extractthat process untrusted content from external web pages using Large Language Models (LLMs). - Ingestion points: Arbitrary web content fetched via
scrape,crawl, orbrowsercommands. - Boundary markers: The documentation does not explicitly detail delimiters used to separate untrusted content from system instructions.
- Capability inventory: The CLI facilitates network requests, file system writes (via output flags), and JavaScript execution in a remote browser environment.
- Sanitization: No specific sanitization or escaping mechanisms for fetched web content are mentioned in the documentation.
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing the CLI tool and its components from the vendor's official resources.
- Evidence: Instructions include
go install github.com/scrapfly/scrapfly-cli/cmd/scrapfly@latestandscrapfly exit-peer install, which downloads binaries and certificate bundles to the local machine from the vendor's repository.
Audit Metadata