scrapfly-crawler
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
scrapfly-sdkpackage from the standard Python package registry. This is the official client library provided by the vendor (Scrapfly). - [COMMAND_EXECUTION]: The documentation includes instructions for shell-based package installation using
pip. It also demonstrates script-level file system operations, such as saving crawl artifacts in WARC/HAR formats and writing extracted documentation to local text files. - [INDIRECT_PROMPT_INJECTION]: The skill has an inherent surface for indirect prompt injection as it is designed to ingest and process data from arbitrary external websites.
- Ingestion points: Untrusted data enters the agent context through the
CrawlerConfigstarting URL and subsequent page retrieval viacrawl.read()andartifact.get_pages()inSKILL.md. - Boundary markers: The provided examples do not demonstrate the use of delimiters or 'ignore' instructions when the agent processes the crawled content.
- Capability inventory: The skill facilitates network communication with the Scrapfly API and local file write operations.
- Sanitization: No content sanitization or validation of the crawled website data is shown in the provided code patterns.
Audit Metadata