crw-scrape
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes Bash tools to execute
crwcommands andcurlfor web scraping and API interaction. - [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface because it processes untrusted data from external URLs.
- Ingestion points: Data enters the agent's context through external web content fetched by
crw scrapeandcurlcommands inSKILL.md. - Boundary markers: The instructions do not define explicit delimiters or warnings to ignore instructions embedded in the scraped content.
- Capability inventory: The skill has access to tool execution via
Bash(crw:*)andBash(curl:*)as well as file reading viaRead. - Sanitization: There are no documented sanitization or filtering steps for the ingested external data.
Audit Metadata