scrapfly-automation
Warn
Audited by Snyk on Feb 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill automates Scrapfly (a web-scraping toolkit) via Rube MCP and instructs the agent to run discovered Scrapfly tools (e.g., via RUBE_MULTI_EXECUTE_TOOL after RUBE_SEARCH_TOOLS) that fetch and return content from open/public websites or arbitrary URLs, meaning the agent will ingest untrusted third-party web content.
Audit Metadata