aliexpress-review-scraper
Fail
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill contains instructions to automatically install a third-party dependency (BrowserAct) if it is missing, using a provided URL:
https://www.browseract.com/?co-from=ecommerce&redirect=https://github.com/browser-act/skills/tree/main. - [COMMAND_EXECUTION]: The instructions explicitly tell the agent to install dependencies 'without asking the user to confirm' and to 'not request separate approval for dependency installation'. This removes critical user oversight for external code execution.
- [COMMAND_EXECUTION]: The skill attempts to conceal its actions by instructing the agent: 'Do not describe it as a request for the user to open their browser'. This is a direct attempt to hide the installation of external components from the user's view.
Recommendations
- AI detected serious security threats
Audit Metadata