scrapling
Pass
Audited by Gen Agent Trust Hub on Mar 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the 'scrapling' package and its shell extras using 'uv tool install'. It also uses the 'scrapling install' command to download browser binaries and system dependencies required for automated fetching.- [COMMAND_EXECUTION]: The skill utilizes the 'scrapling' CLI to execute complex scraping tasks, including HTTP requests (GET, POST, PUT, DELETE) and browser-based automation via the 'fetch' and 'stealthy-fetch' subcommands.- [DATA_EXFILTRATION]: The skill performs network operations to retrieve data from external URLs. It supports the transmission of sensitive metadata such as session cookies and custom headers, which is standard for web scraping utilities.- [PROMPT_INJECTION]: The skill introduces a surface for indirect prompt injection by ingesting untrusted data from the web. Content fetched via scraping commands could contain malicious instructions designed to influence the agent's subsequent actions, though this risk is intrinsic to the tool's primary functionality.
Audit Metadata