web-crawler
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from numerous social media platforms and web archives, which could contain malicious instructions. Evidence chain: 1. Ingestion points:
exports.pyfunctions includingscrape_page,sc_get,apify_run, andarchive_fallback. 2. Boundary markers: The skill instructions do not mandate specific delimiters for the agent's output, although they do advise the agent to treat scraped Markdown as an 'extraction substrate' rather than absolute truth. 3. Capability inventory: The skill performs network requests viaproxied_getandproxied_postand returns content for agent processing. 4. Sanitization: Instructions recommend that the agent validate extraction results and convert content into generic structured summaries.\n- [EXTERNAL_DOWNLOADS]: The skill fetches data from several external services including ScrapeCreators (api.scrapecreators.com), Firecrawl (api.firecrawl.dev), Apify (api.apify.com), and various web archive services (archive.org,archive.today). These network operations are the primary intended function of the skill and utilize a vendor-managed transparent proxy for authentication and billing.\n- [DYNAMIC_EXECUTION]: The helper scriptexports.pyand theSKILL.mdinstructions involve modifyingsys.pathto include the skill's local directory. This is a standard and expected pattern in the agent environment to allow importing local modules likeexports.py.
Audit Metadata