scrapfly-screenshot
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the
scrapfly-sdkPython package, which is the official library provided by the vendor for interacting with their service. - [COMMAND_EXECUTION]: The documentation provides instructions to install the necessary SDK using the standard Python package manager (pip).
- [DYNAMIC_EXECUTION]: The skill demonstrates how to execute custom JavaScript on target web pages before capturing a screenshot. This functionality is used to modify the page state (e.g., removing cookie banners) and is executed within the remote, sandboxed browser environment of the Scrapfly service.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external content from URLs to generate screenshots. This creates a potential surface for indirect prompt injection if an agent with vision capabilities processes the resulting image and follows malicious instructions embedded within the page.
- Ingestion points: User-provided URLs in
ScreenshotConfigobjects. - Boundary markers: None mentioned in the usage examples.
- Capability inventory: Shell command execution for installation; network communication with
api.scrapfly.io; local file system writes to save image files. - Sanitization: No specific validation or sanitization is applied to input URLs or the rendered visual content.
Audit Metadata