price-comparison
Fail
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: Fetches and executes an installation script from
https://cli.brightdata.com/install.shusing a pipe to bash in SKILL.md. This script originates from the vendor's official domain and is used to set up the required environment. - [COMMAND_EXECUTION]: Regularly invokes the
bdatacommand-line interface to manage authentication and execute data collection tasks across multiple retailers (SKILL.md). - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted product information from external websites.
- Ingestion points: Web content including product names and availability statuses from retailer URLs via the
bdatatool (SKILL.md). - Boundary markers: No specific delimiters or instructions to ignore embedded commands are included for processed data.
- Capability inventory: Shell execution of vendor tools and file creation for JSON/CSV outputs (SKILL.md).
- Sanitization: The instructions focus on data structure but do not explicitly require sanitization of the retrieved text.
- [EXTERNAL_DOWNLOADS]: Downloads necessary CLI components from the vendor's official host at
cli.brightdata.com(SKILL.md).
Recommendations
- HIGH: Downloads and executes remote code from: https://cli.brightdata.com/install.sh - DO NOT USE without thorough review
Audit Metadata