scrapfly-crawler

Pass

Audited by Gen Agent Trust Hub on Oct 22, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill installs the scrapfly-sdk package from the standard Python package registry. This is the official client library provided by the vendor (Scrapfly).
  • [COMMAND_EXECUTION]: The documentation includes instructions for shell-based package installation using pip. It also demonstrates script-level file system operations, such as saving crawl artifacts in WARC/HAR formats and writing extracted documentation to local text files.
  • [INDIRECT_PROMPT_INJECTION]: The skill has an inherent surface for indirect prompt injection as it is designed to ingest and process data from arbitrary external websites.
  • Ingestion points: Untrusted data enters the agent context through the CrawlerConfig starting URL and subsequent page retrieval via crawl.read() and artifact.get_pages() in SKILL.md.
  • Boundary markers: The provided examples do not demonstrate the use of delimiters or 'ignore' instructions when the agent processes the crawled content.
  • Capability inventory: The skill facilitates network communication with the Scrapfly API and local file write operations.
  • Sanitization: No content sanitization or validation of the crawled website data is shown in the provided code patterns.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 22, 2026, 10:50 PM