scrapfly-sdk-typescript
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of untrusted data from arbitrary external URLs via
client.scrape()and processes that content through an AI-powered extraction tool (client.extract()). This creates an attack surface for indirect prompt injection, where malicious instructions embedded in a target website could influence the AI agent's behavior during the data parsing phase. - Ingestion points: External web content is retrieved from any URL specified in the
ScrapeConfigobject. - Boundary markers: The provided documentation and code examples do not specify the use of delimiters or system-level instructions to ignore malicious commands embedded within the scraped HTML or text.
- Capability inventory: The skill possesses network capabilities to fetch remote content and uses an AI extraction tool to interpret that content.
- Sanitization: No sanitization or filtering of the scraped content is performed before it is passed to the AI extraction prompt.
- [EXTERNAL_DOWNLOADS]: The skill instructions direct the user to install the
scrapfly-sdkpackage via the npm registry or JSR (jsr:@scrapfly/scrapfly-sdk). These are official resources provided by the vendor for interacting with their service.
Audit Metadata