brightdata-mcp
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external websites and search results, which are untrusted sources that could contain malicious instructions designed to influence the agent. • Ingestion points: The
scrape_url,search_engine, andextract_structured_datatools defined in SKILL.md. • Boundary markers: There are no explicit instructions or delimiters provided to help the agent distinguish between its instructions and the content being scraped. • Capability inventory: The agent processes the scraped HTML, Markdown, or JSON, potentially using it to drive further actions. • Sanitization: No sanitization or safety filtering of the scraped content is described in the skill configuration. - [EXTERNAL_DOWNLOADS]: The skill setup requires running
@brightdata/mcpvianpx, which downloads the package from the npm registry. This is an official resource from Bright Data, an established service provider.
Audit Metadata