scrapfly-screenshot

Pass

Audited by Gen Agent Trust Hub on Oct 22, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references the scrapfly-sdk Python package, which is the official library provided by the vendor for interacting with their service.
  • [COMMAND_EXECUTION]: The documentation provides instructions to install the necessary SDK using the standard Python package manager (pip).
  • [DYNAMIC_EXECUTION]: The skill demonstrates how to execute custom JavaScript on target web pages before capturing a screenshot. This functionality is used to modify the page state (e.g., removing cookie banners) and is executed within the remote, sandboxed browser environment of the Scrapfly service.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external content from URLs to generate screenshots. This creates a potential surface for indirect prompt injection if an agent with vision capabilities processes the resulting image and follows malicious instructions embedded within the page.
  • Ingestion points: User-provided URLs in ScreenshotConfig objects.
  • Boundary markers: None mentioned in the usage examples.
  • Capability inventory: Shell command execution for installation; network communication with api.scrapfly.io; local file system writes to save image files.
  • Sanitization: No specific validation or sanitization is applied to input URLs or the rendered visual content.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 22, 2026, 10:50 PM