Security audit
Security checks for vulnerabilities and agentic risk
This is a coherent Olostep API skill that openly provides web scraping, crawling, search, batch, mapping, and answer workflows, with no evidence of hidden execution or persistence.
Install only if you are comfortable sending requested URLs, search queries, crawl targets, batch URL lists, schemas, and answer prompts to Olostep. Use it on sites and data you are authorized to access, keep crawl and batch scopes small and intentional, and avoid submitting secrets, private internal systems, customer data, or confidential investigations without explicit approval.
This markdown file describes behaviors that can affect user data and external systems, including extracting content from any URL, recursively crawling websites, and scraping up to 10,000 URLs in parallel. The description does not include any caution about transmitting URLs/content to a third-party API, respecting target-site policies, or the impact of large-scale crawling.
The skill is explicitly designed to send user-supplied URLs, queries, and tasks to a third-party API, but it provides no privacy notice, consent checkpoint, or guidance about sensitive data handling. This can cause users or downstream agents to transmit proprietary URLs, internal debugging data, search terms, or research tasks to an external service without realizing the data-sharing implications.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
**Authentication:** Every request needs `Authorization: Bearer $OLOSTEP_API_KEY`. If the env var is missing, stop and tell the user to set it. Get a free key (500 req/month) at https://olostep.com/auth.
**Base URL:** `https://api.olostep.com/v1`
---
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
**Authentication:** Every request needs `Authorization: Bearer $OLOSTEP_API_KEY`. If the env var is missing, stop and tell the user to set it. Get a free key (500 req/month) at https://olostep.com/auth.
**Base URL:** `https://api.olostep.com/v1`
---
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
**Authentication:** Every request needs `Authorization: Bearer $OLOSTEP_API_KEY`. If the env var is missing, stop and tell the user to set it. Get a free key (500 req/month) at https://olostep.com/auth.
**Base URL:** `https://api.olostep.com/v1`
---
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
**Authentication:** Every request needs `Authorization: Bearer $OLOSTEP_API_KEY`. If the env var is missing, stop and tell the user to set it. Get a free key (500 req/month) at https://olostep.com/auth.
**Base URL:** `https://api.olostep.com/v1`
---
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
**Authentication:** Every request needs `Authorization: Bearer $OLOSTEP_API_KEY`. If the env var is missing, stop and tell the user to set it. Get a free key (500 req/month) at https://olostep.com/auth.
**Base URL:** `https://api.olostep.com/v1`
---
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
**Authentication:** Every request needs `Authorization: Bearer $OLOSTEP_API_KEY`. If the env var is missing, stop and tell the user to set it. Get a free key (500 req/month) at https://olostep.com/auth.
**Base URL:** `https://api.olostep.com/v1`
---
This finding flags the same scrape example's external API destination. In context it duplicates the transmission concern already confirmed at this line: the skill encourages sending user-controlled URLs/content to a third party without consent or sensitivity checks.
Extract content from any URL as markdown, HTML, JSON, or text. Handles JavaScript rendering and anti-bot protections automatically.
curl -sS -X POST "https://api.olostep.com/v1/scrapes" \
-H "Authorization: Bearer $OLOSTEP_API_KEY" \
-H "Content-Type: application/json" \
-d '{
This finding flags the same scrape example's external API destination. In context it duplicates the transmission concern already confirmed at this line: the skill encourages sending user-controlled URLs/content to a third party without consent or sensitivity checks.
Extract content from any URL as markdown, HTML, JSON, or text. Handles JavaScript rendering and anti-bot protections automatically.
curl -sS -X POST "https://api.olostep.com/v1/scrapes" \
-H "Authorization: Bearer $OLOSTEP_API_KEY" \
-H "Content-Type: application/json" \
-d '{
This is the destination-URL form of the same search transmission issue at line 57. The skill context makes the transmission expected, but still risky because query content may reveal sensitive internal information and no warning or consent step is included.
Search Google by scraping a Google URL with the @olostep/google-search parser. No separate search endpoint — search goes through /v1/scrapes.
curl -sS -X POST "https://api.olostep.com/v1/scrapes" \
-H "Authorization: Bearer $OLOSTEP_API_KEY" \
-H "Content-Type: application/json" \
-d '{
This is the destination-URL form of the same search transmission issue at line 57. The skill context makes the transmission expected, but still risky because query content may reveal sensitive internal information and no warning or consent step is included.
Search Google by scraping a Google URL with the @olostep/google-search parser. No separate search endpoint — search goes through /v1/scrapes.
curl -sS -X POST "https://api.olostep.com/v1/scrapes" \
-H "Authorization: Bearer $OLOSTEP_API_KEY" \
-H "Content-Type: application/json" \
-d '{
Starting a crawl sends a user-selected start URL and crawl parameters to an external service, which may expose internal documentation locations or reconnaissance targets. Crawling also compounds the amount of third-party-visible activity compared with a single-page request.
# Start crawl
curl -sS -X POST "https://api.olostep.com/v1/crawls" \
-H "Authorization: Bearer $OLOSTEP_API_KEY" \
-H "Content-Type: application/json" \
-d '{
The batch feature encourages transmission of up to 10,000 URLs to an external provider with no caution about privacy, rate/impact, or the risk of large-scale exfiltration of internal inventories, customer targets, or proprietary site lists. At this scale, a mistaken or maliciously influenced batch request can amplify data exposure and create operational or compliance problems very quickly.
This is the destination-URL form of the batch transmission issue and confirms bulk external transfer to Olostep. The risk is elevated by the scale and the absence of guidance on confidentiality, approval, or safe scoping.
Scrape up to 10,000 URLs in one parallel batch. Async — poll for results.
curl -sS -X POST "https://api.olostep.com/v1/batches" \
-H "Authorization: Bearer $OLOSTEP_API_KEY" \
-H "Content-Type: application/json" \
-d '{
This is the destination-URL form of the batch transmission issue and confirms bulk external transfer to Olostep. The risk is elevated by the scale and the absence of guidance on confidentiality, approval, or safe scoping.
Scrape up to 10,000 URLs in one parallel batch. Async — poll for results.
curl -sS -X POST "https://api.olostep.com/v1/batches" \
-H "Authorization: Bearer $OLOSTEP_API_KEY" \
-H "Content-Type: application/json" \
-d '{
Site mapping sends a target URL and filtering parameters to an external provider and can reveal intended reconnaissance scope or internal site structure targets. Even without scraping page bodies, this still externalizes potentially sensitive targeting information.
Discover all URLs on a site without scraping content. Synchronous — returns immediately.
curl -sS -X POST "https://api.olostep.com/v1/maps" \
-H "Authorization: Bearer $OLOSTEP_API_KEY" \
-H "Content-Type: application/json" \
-d '{
This duplicates the answers endpoint transmission concern: free-form task text is disclosed to a third-party service without any privacy notice or redaction guidance. Because tasks can contain strategic, customer, or incident-response information, the omission is security-relevant.
Web-sourced answers with citations. Optionally provide JSON schema for structured output. Synchronous.
curl -sS -X POST "https://api.olostep.com/v1/answers" \
-H "Authorization: Bearer $OLOSTEP_API_KEY" \
-H "Content-Type: application/json" \
-d '{
This duplicates the answers endpoint transmission concern: free-form task text is disclosed to a third-party service without any privacy notice or redaction guidance. Because tasks can contain strategic, customer, or incident-response information, the omission is security-relevant.
Web-sourced answers with citations. Optionally provide JSON schema for structured output. Synchronous.
curl -sS -X POST "https://api.olostep.com/v1/answers" \
-H "Authorization: Bearer $OLOSTEP_API_KEY" \
-H "Content-Type: application/json" \
-d '{
Structured-output answer requests may encourage users to send even more detailed proprietary intelligence tasks to the external API. The schema itself can also reveal what sensitive fields the user is trying to extract, compounding disclosure risk.
With structured output:
curl -sS -X POST "https://api.olostep.com/v1/answers" \
-H "Authorization: Bearer $OLOSTEP_API_KEY" \
-H "Content-Type: application/json" \
-d '{
No suspicious patterns detected.