Web Scraper Pro Zhuyu28
Security checks across malware telemetry and agentic risk
Overview
This skill appears to be a simple, disclosed web-scraping/form-filling stub with no hidden execution, credential access, persistence, or data exfiltration.
This is acceptable to install, but treat it as a minimal placeholder rather than a proven browser automation tool. Verify results before relying on them, avoid entering secrets into form data unless necessary, and require explicit approval before using any future version to submit forms, change accounts, publish content, or interact with websites on your behalf.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.