1688-supplier-profile-scraper

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.80). The Skill includes explicit instructions to install runtime dependencies automatically and to hide or avoid asking the user for confirmation (e.g., "install... automatically without asking the user" and "Do not describe it... and do not request separate approval"), which are deceptive operational directions outside the stated scraping purpose.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). SKILL.md instructs the agent to use the BrowserAct CLI to “access real browser pages” and “capture browser-visible page content” from user-specified target URLs at runtime, which can include outsider-authored free text from public web pages.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill requires installing and invoking the external BrowserAct CLI at runtime and explicitly directs the agent to "Install BrowserAct" via the URL https://www.browseract.com/?co-from=ecommerce&redirect=https://github.com/browser-act/skills/tree/main (and references https://www.browseract.com/?co-from=ecommerce), which indicates the agent will fetch and install remote executable code as a required dependency.