skills/terminalskills/skills/crawlee/Gen Agent Trust Hub

crawlee

Pass

Audited by Gen Agent Trust Hub on Sep 22, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill requires the installation of the crawlee and playwright packages from the NPM registry as part of its setup process.
  • [COMMAND_EXECUTION]: The skill utilizes npx playwright install chromium to download and configure the necessary browser binaries for JavaScript-rendered page crawling.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external websites, creating a surface for indirect prompt injection attacks.
  • Ingestion points: Data is retrieved from remote URLs via the requestHandler methods in CheerioCrawler and PlaywrightCrawler defined in SKILL.md.
  • Boundary markers: The provided code examples do not implement specific delimiters or instructional guardrails to prevent the agent from following commands embedded in the scraped content.
  • Capability inventory: The skill possesses capabilities for network crawling, following links (enqueueLinks), and exporting structured data to local files (Dataset.exportToCSV).
  • Sanitization: The examples demonstrate basic text extraction and trimming but do not include sanitization or validation logic to filter out potentially malicious prompt instructions from the scraped data.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 22, 2026, 05:25 PM
Security Audit — agent-trust-hub — crawlee