scrapeninja
Pass
Audited by Gen Agent Trust Hub on Apr 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
curlto perform HTTP POST requests to the ScrapeNinja API andjqto process the resulting JSON data. These operations are restricted to the intended functionality of the service. - [EXTERNAL_DOWNLOADS]: The skill facilitates communication with external API endpoints at
scrapeninja.p.rapidapi.comto retrieve web content. These are well-known services for the stated purpose of the skill. - [DATA_EXFILTRATION]: Authentication is handled by passing a user-provided API key from the
SCRAPENINJA_TOKENenvironment variable to the external API service via HTTP headers. This is standard practice for API integration. - [PROMPT_INJECTION]: As a web scraping tool, the skill processes untrusted data from external websites. This represents a potential surface for indirect prompt injection.
- Ingestion points: Scraped HTML/JSON content from arbitrary user-provided URLs.
- Boundary markers: None explicitly defined in the prompt templates.
- Capability inventory: File writing to
/tmp,curlnetwork operations, andjqparsing. - Sanitization: No explicit sanitization or filtering of the scraped content is described in the instructions.
Audit Metadata