crawlee
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
crawleeandplaywrightpackages from the NPM registry as part of its setup process. - [COMMAND_EXECUTION]: The skill utilizes
npx playwright install chromiumto download and configure the necessary browser binaries for JavaScript-rendered page crawling. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external websites, creating a surface for indirect prompt injection attacks.
- Ingestion points: Data is retrieved from remote URLs via the
requestHandlermethods inCheerioCrawlerandPlaywrightCrawlerdefined inSKILL.md. - Boundary markers: The provided code examples do not implement specific delimiters or instructional guardrails to prevent the agent from following commands embedded in the scraped content.
- Capability inventory: The skill possesses capabilities for network crawling, following links (
enqueueLinks), and exporting structured data to local files (Dataset.exportToCSV). - Sanitization: The examples demonstrate basic text extraction and trimming but do not include sanitization or validation logic to filter out potentially malicious prompt instructions from the scraped data.
Audit Metadata