Scrapfly SDK Go

• Outcome: Pass
• Latest audit: Sep 16, 2026 · 10:03 AM UTC
• Version: 1.0.0

Overview

This skill is a straightforward Scrapfly Go SDK usage guide, with scraping and anti-bot features disclosed, but users should apply legal and dependency hygiene before using it.

Install only if you intend to use Scrapfly for authorized scraping. Check target-site terms, robots.txt, rate limits, and applicable law before using ASP, proxy pools, or geo-targeting, and pin the Go dependency to a reviewed version in your project.

A.I.G

Vulnerability Patterns

• Insecure Dependencies: Introduces malicious components through unsafe dependency sources
• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally

Findings (1)

T08 · Insecure Dependencies

Warning

• Location: SKILL.md:24

Finding

Unpinned Third-Party Go Dependency

Content

View full analysis

Vulnerability Details

File Location: SKILL.md, lines 24–27
Vulnerability Type: T08: Insecure Dependencies
Risk Level: Medium

Vulnerable code:

bash

go get github.com/scrapfly/go-scrapfly
export SCRAPFLY_API_KEY="your-api-key"

Technical Analysis

The installation command does not specify a version or immutable commit for github.com/scrapfly/go-scrapfly. Consequently, users following the instructions may retrieve whichever module version is selected at installation time rather than a release whose contents were reviewed with this Skill.

This creates supply-chain exposure because the effective dependency can change after the Skill has been audited. If the upstream repository, maintainer account, or release process is compromised, a malicious or unexpectedly incompatible release could enter the user's build. The package path and linked service domain are consistent with the Skill's declared purpose; there is no evidence in the audited file of dependency confusion, typosquatting, or a currently malicious package.

Attack Path

1. An attacker compromises the upstream repository, a maintainer account, or its release process.
2. The attacker publishes a malicious module version that can be selected by the unpinned installation command.
3. A user follows the Skill and runs go get github.com/scrapfly/go-scrapfly.
4. The malicious dependency is incorporated into the user's module graph and application build.
5. When the affected dependency code is executed, it runs with the privileges and environment access of the application process.

Impact Assessment

Successful exploitation could allow malicious dependency code to access application-readable data, environment variables such as SCRAPFLY_API_KEY, network resources, and files available to the application account. It could also alter scraping results or exfiltrate processed content.

The maximum scope is bounded by the privileges, cre ...[truncated 267 chars]

Remediation

View remediation

Remediation Suggestions

• Pin the dependency to a reviewed release, for example:

  bash

  go get github.com/scrapfly/go-scrapfly@vX.Y.Z
  

• Replace vX.Y.Z with a specific version that has been reviewed and tested.
• Commit go.mod and go.sum so Go's checksum verification can detect unexpected dependency changes.
• Review release notes and dependency diffs before upgrading the pinned version.
• Use automated dependency and vulnerability scanning for the complete Go module graph.
• Run applications with least privilege and expose only the environment variables, files, and network destinations required for their operation.

SkillSpector

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 92% confidence

Finding

The skill explicitly promotes anti-bot bypass, proxy rotation, geo-targeting, and JavaScript-rendered scraping, but it does not warn users about legal, ethical, or target-site policy risks. In a skill intended to guide agent behavior, omitting that warning can normalize potentially abusive scraping and make misuse more likely, especially where anti-bot controls are intentionally being circumvented.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.