scrape-docs
Pass
Audited by Gen Agent Trust Hub on Aug 13, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external URLs which could contain malicious instructions designed to influence the agent's behavior.
- Ingestion points: External documentation content is fetched via the Firecrawl MCP tool using the $ARGUMENTS input in SKILL.md.
- Boundary markers: None. The skill lacks instructions or delimiters to isolate the scraped content or warn the agent to ignore embedded instructions.
- Capability inventory: The skill provides the ability to read, extract, and summarize external content using Firecrawl.
- Sanitization: No sanitization, validation, or filtering of the fetched content is performed before processing.
Audit Metadata