facebook-outreach
Pass
Audited by Gen Agent Trust Hub on Apr 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTIONCREDENTIALS_UNSAFE
Full Analysis
- [COMMAND_EXECUTION]: The script scripts/facebook-outreach.js executes automated browser interactions via the Playwright library to navigate Facebook, interact with UI components, and send messages.\n- [DATA_EXFILTRATION]: The skill performs automated scraping of contact details (emails, phone numbers, websites) from Facebook pages and stores the collected data in a PostgreSQL database.\n- [PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection through data ingestion.\n
- Ingestion points: scripts/facebook-outreach.js scrapes unstructured text from Facebook page sidebars and 'About' sections.\n
- Boundary markers: None identified; the scraped content is not delimited or marked as untrusted for downstream processing.\n
- Capability inventory: Database write access and full browser automation capabilities.\n
- Sanitization: Limited to regex extraction for specific patterns; no comprehensive sanitization of the scraped text is performed.\n- [CREDENTIALS_UNSAFE]: Both scripts/facebook-outreach.js and scripts/facebook-url-normalize.js configure the PostgreSQL client with ssl: { rejectUnauthorized: false }, which bypasses certificate validation and exposes the connection to potential man-in-the-middle attacks.
Audit Metadata