Scrapin Io

Security checks across malware telemetry and agentic risk

Overview

This is a disclosed Scrapin.io scraping integration with no evidence of hidden code, persistence, destructive behavior, or credential theft.

Install only if you intend to use Scrapin.io through Membrane. Treat scraping and LinkedIn/profile lookup actions as sensitive: confirm authorization, respect applicable laws and site terms, minimize collected personal data, and supervise any raw proxy requests.

SkillSpector

By NVIDIA

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

Confidence: 90% confidence
Finding: The skill explicitly supports web scraping and raw proxy requests to the Scrapin.io API, but it provides no guidance on authorization, privacy, terms-of-service compliance, or data sensitivity. In practice, that omission can normalize collection of third-party personal or business data without checks, increasing the chance of misuse or privacy violations.

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal