ultimate-scraper

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 0.90). The codebase is explicitly designed to evade anti-bot defenses and bypass paywalls (TLS/J A4T spoofing, fingerprint persistence, proxy/session-sticky, Camoufox/CloakBrowser, automated CAPTCHA solving via CapSolver/2Captcha, and Brightdata/unlocker fallbacks) which gives it high potential for deliberate abuse (unauthorized data exfiltration, scraping behind logins, and automated actions via WebMCP); I found no obfuscated hidden remote backdoor or covert exfiltration to unknown endpoints, but several deliberate features materially enable malicious scraping and supply-chain risk from auto-downloaded patched browser binaries.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Outsider free text from the target website is fetched at runtime (via Tier 4 Crawl4AI/LLM extraction path) and then embedded into the LLM prompt as content in scripts/extraction/ai_router.py (... "Content:\n{content}"), enabling indirect prompt injection from arbitrary page text.