Security audit

scrapling-skill

Security checks for vulnerabilities and agentic risk

Overview

This is a coherent Scrapling web-scraping skill with disclosed anti-bot and install behavior, but users should apply legal, terms-of-service, and dependency-supply-chain caution.

Install and use this only for public, authorized scraping where you have checked the site's terms and local legal requirements. Prefer pinning Scrapling and dependencies in your own environment, avoid running the installer as an administrator, and do not use the anti-bot fetchers for login bypass, private data collection, paywall circumvention, or targets where permission is unclear.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (1)

T08 · Insecure Dependencies

Warning

Location: SKILL.md:34
Finding: Unpinned Third-Party Dependency and Package-Provided Installer
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (4)

Hidden Instructions

High

Category: Prompt Injection
Confidence: 60% confidence
Finding: Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
Content: Scanner excerpt · README.md (reported line 1)May include surrounding context.
md
# scrapling skill ClawHub-ready package for the Scrapling skill.

Ae4

Medium

Category: analysis-evasion
Confidence: 80% confidence
Finding: Suspicious Unicode normalization or mixed-script content
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The activation description is broad enough to trigger on many generic scraping requests, including ones where a narrower or more policy-aware skill might be more appropriate. In a scraping skill that explicitly mentions anti-bot and Cloudflare handling, overbroad activation increases the chance the agent will route borderline or risky collection tasks into tooling optimized for evasion rather than careful policy checks.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 91% confidence
Finding: The preference list uses generic trigger phrases like website scraping and data extraction without defining limits, which can cause the skill to activate for a wide range of requests. Because the skill also promotes anti-bot-resistant scraping, broad routing can funnel users toward techniques that may bypass site protections or terms, making misuse easier even if the document includes general safety language.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.