web-scraping-python
Pass
Audited by Gen Agent Trust Hub on Apr 8, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill naturally interacts with untrusted web content which presents a surface for indirect prompt injection if scraped data is processed by an LLM without sanitization. Ingestion points: Network requests in
examples/after.mdandscripts/new_scraper.py. Boundary markers: Absent. Capability inventory: Network access for scraping and file system writes for data storage. Sanitization: The skill uses structural parsing but does not define sanitization for downstream LLM use. - [COMMAND_EXECUTION]: The
scripts/new_scraper.pyutility generates executable Python scripts and utilizeschmod(0o755)to set execution permissions, which is a standard pattern for developer scaffolding tools.
Audit Metadata