scrapfly-crawler
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
scrapfly-sdkpackage. This is the official library for the Scrapfly service and is a standard dependency for this functionality. - [INDIRECT_PROMPT_INJECTION]: The skill allows the agent to ingest content from arbitrary websites, which acts as a vector for indirect prompt injection. Malicious content on a crawled page could contain instructions designed to influence the agent's behavior.
- Ingestion points: Untrusted data is fetched from the web and processed via
Crawl.read(),read_batch(), andartifact.get_pages()inSKILL.md. - Boundary markers: There are no explicit delimiters or protective prompts shown to differentiate crawled content from system instructions.
- Capability inventory: The skill possesses the ability to perform network reads and write the resulting artifacts to the local filesystem.
- Sanitization: No sanitization of the crawled content is demonstrated in the provided code snippets.
Audit Metadata