just-scrape@r1

CAUTION

Publisher claims: "Search, scrape, crawl, extract structured data, and monitor web pages via the ScrapeGraph AI CLI. Use when the user asks to search the web, scrape a webpage, grab content from a URL, extract JSON from a site, crawl documentation or site sections, monitor a page for changes, inspect request history, check ScrapeGraph credits, or validate API setup." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry skills.shPublisher scrapegraphai · joined 2 days agoInstalls 245KLast detonated 39 h ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

CRITICAL

Access to sensitive file pathsSKILL.md:196 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Fake instruction boundary tagSKILL.md:77 · Fake instruction boundary tag

AST01

HIGH

npx invocation of non-well-known packageSKILL.md:263 · npx invocation of non-well-known package — may execute untrusted code

AST06

CRITICAL

Access to sensitive file pathsSKILL.md:37 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

LOW

Unpinned dependencySKILL.md:263 · Unpinned dependency

AST06

LOW

Unpinned dependencySKILL.md:32 · Unpinned dependency

AST06