Security audit

Scrapling - Stealth Web Scraper

Security checks for vulnerabilities and agentic risk

Overview

This is a transparent web-scraping helper with disclosed network and browser behavior, but it should only be used on authorized sites and preferably in an isolated environment.

Install and run this only in a virtual environment or disposable container, avoid administrator privileges, use it only for sites you are authorized to scrape, and do not pass untrusted URLs or credentials unless you understand where requests and cookies will be sent.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review

Findings (2)

T09 · Insecure Skill Coding Practices

Warning

Location: scripts/scrape.py:26
Finding: Unrestricted URL Fetching Enables Server-Side Request Forgery
Content: View full analysis
Remediation: View remediation

T08 · Insecure Dependencies

Warning

Location: SKILL.md:24
Finding: Unpinned Dependencies and Browser Downloads Create Supply-Chain Risk
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Undeclared Tool Scope

Medium

Category: MCP Least Privilege
Confidence: 95% confidence
Finding: The skill clearly enables network-capable actions such as fetching arbitrary URLs, running stealth browser modes, and starting a local MCP HTTP service, but it declares no explicit tool scope or permission boundaries. Without an allowlist or permissions metadata, an agent may invoke this skill against unintended targets, increasing the risk of unauthorized scraping, SSRF-like access patterns, or policy bypass through an underconstrained network tool.
Content: No source excerpt is available for this finding.

Missing User Warnings

Low

Category: Not specified by scanner
Confidence: 81% confidence
Finding: This markdown file contains usage examples that perform HTTP requests to external websites, including a 'Stealth fetch' example for a protected site. While there is a warning for the MCP server, the scraping examples themselves do not disclose that using them will send network requests and may transmit cookies or supplied form data to third-party sites.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.