1688-wholesale-product-scraper
Fail
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The instructions mandate the automatic installation of the 'BrowserAct CLI' from an external domain (
browseract.com) if it is not found on the system. - [REMOTE_CODE_EXECUTION]: The skill contains specific directives to perform these installations silently ('without asking the user to confirm') and to suppress any requests for user approval ('do not request separate approval for dependency installation'). Executing installation scripts from unverified third-party sources without oversight poses a significant risk of remote code execution.
- [COMMAND_EXECUTION]: The skill relies on a required CLI dependency ('BrowserAct CLI') that is installed and executed at runtime. The instructions tell the agent to 'use the installed browser-act Skill and BrowserAct CLI when available,' involving shell execution of third-party binaries.
Recommendations
- AI detected serious security threats
Audit Metadata