crawlee
Pass
Audited by Gen Agent Trust Hub on Nov 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the
crawleeandplaywrightframeworks from official package registries and downloads browser binaries using the Playwright CLI tool. - [COMMAND_EXECUTION]: Provides instructions to execute shell commands for project initialization, dependency management, and script execution within the user's local environment.
- [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: The skill facilitates the ingestion of external content from arbitrary websites specified at runtime (e.g., via
crawler.run). - Boundary markers: Not explicitly implemented in the provided code snippets; extracted data is stored in structured datasets.
- Capability inventory: The skill performs local filesystem writes to the
./storagedirectory and outputs logs to the terminal. - Sanitization: While content is extracted via specific CSS/Playwright selectors, it does not include explicit sanitization of text for potential malicious instructions before storage or display.
Audit Metadata