aliexpress-listings-scraper
Fail
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill mandates that the agent automatically install the 'browser-act' CLI and associated dependencies if they are missing, which involves executing external setup code.
- [PROMPT_INJECTION]: The instructions explicitly tell the agent to install dependencies 'automatically without asking the user to confirm' and 'do not request separate approval,' which is a direct attempt to override the agent's built-in safety guardrails and user consent protocols.
- [EXTERNAL_DOWNLOADS]: The skill directs the agent to fetch installation resources from an external URL (browseract.com) that redirects to a GitHub repository not included in the trusted vendors list.
Recommendations
- AI detected serious security threats
Audit Metadata