1688-wholesale-product-scraper
Fail
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The instructions mandate the automatic installation of the BrowserAct CLI and associated skills if they are not already present. This process bypasses user confirmation and fetches software from an external, non-trusted source.
- [COMMAND_EXECUTION]: The skill explicitly forbids the agent from requesting approval for dependency installation, instructing it to execute installation commands silently as a required runtime step.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes content from 1688.com wholesale listings, providing an attack surface for malicious website content to influence agent actions.
- Ingestion points: Wholesale product pages, listings, and search results on 1688.com (referenced in SKILL.md).
- Boundary markers: No explicit delimiters or instructions to ignore embedded website commands are provided.
- Capability inventory: Browser interaction, screenshot capture, and network response logging via the browser-act tool.
- Sanitization: The skill lacks mentions of data sanitization or validation for the captured website content.
Recommendations
- AI detected serious security threats
Audit Metadata