scrape-create-spider
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the Bash tool to execute
uv run scrapy crawlfor validating the generated spider code. This execution is gated by the developer's intended workflow for testing crawl results and saving them to a local file (items.jsonl). - [SAFE]: The skill encourages secure credential management by instructing users to set the
ZYTE_API_KEYvia environment variables or Scrapy settings rather than hardcoding secrets into the generated spider files. - [SAFE]: All identified Python dependencies, such as
scrapy,scrapy-poet, andscrapy-zyte-api, are standard, well-maintained libraries within the web scraping ecosystem. The reference materials provided point to official documentation sites. - [SAFE]: The skill operates on local project directories and uses page object paths provided as arguments, which is consistent with its role as a development-time assistant tool.
Audit Metadata