scrapfly-sdk-go
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill facilitates the installation and use of the official Scrapfly SDK for Go via
github.com/scrapfly/go-scrapfly. This is a legitimate resource belonging to the skill's author. - [SAFE]: Credential management instructions correctly advise using environment variables (
os.Getenv("SCRAPFLY_API_KEY")) rather than hardcoding sensitive API keys directly into the code. - [INDIRECT_PROMPT_INJECTION]: The skill's primary purpose involves fetching and processing untrusted content from the web through scraping and AI extraction APIs. While this constitutes an attack surface for indirect prompt injection, it is the core intended functionality of the skill. The instructions do not contain any patterns that would encourage the bypass of safety guardrails or the execution of malicious instructions embedded in the scraped data.
Audit Metadata