web-scraper

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 0.90). High risk: the skill explicitly documents evasion techniques (header/user-agent spoofing, proxy pools, browser fingerprinting) and captcha bypass (including 2Captcha/YesCaptcha) that enable stealthy, unauthorized large-scale scraping and potential data exfiltration.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). [Web Scraper 运行路径为外部提供的“目标 URL/网站”通过 HTTP/Playwright 抓取并将 HTML/JS 中的文本内容喂给解析/抽取逻辑（CSS/XPath/正则/Schema），因此存在外部作者文本在运行时被 LLM 间接摄取的风险。]