CtrlK
BlogDocsLog inGet started
Tessl Logo

scrapling-official

Scrape web pages using Scrapling with anti-bot bypass (like Cloudflare Turnstile), stealth headless browsing, spiders framework, adaptive scraping, and JavaScript rendering. Use when asked to scrape, crawl, or extract data from websites; web_fetch fails; the site has anti-bot protections; write Python code to scrape/crawl; or write spiders.

69

Quality

87%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Critical

Do not install without reviewing

SKILL.md
Quality
Evals
Security
Critical

E004: Prompt injection detected in skill instructions.

What this means

Detected a prompt injection in the skill instructions. The skill contains hidden or deceptive instructions that fall outside its stated purpose and attempt to override the agent’s safety guidelines or intended behavior.

Why it was flagged

The skill documentation explicitly describes and instructs on bypassing anti-bot protections (e.g., Cloudflare Turnstile), stealth/browser-fingerprinting evasion, proxy/CDP usage, and running unauthenticated MCP servers — dual-use capabilities that weaken security boundaries without clear malicious intent.

Report incorrect finding
Low

W011: Third-party content exposure detected (indirect prompt injection risk).

What this means

The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.

Why it was flagged

Scrapling’s required runtime workflow fetches and converts outsider-authored web page content (e.g., via CLI “scrapling extract get/fetch/stealthy-fetch” or MCP tools like `fetch`/`stealthy_fetch` with `url`), which the system then exposes to downstream LLM consumption as extracted Markdown/text.

Repository
D4Vinci/Scrapling
Audited
Security analysis
Snyk

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.