allegro-search-results-scraper
Fail
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: HIGHPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill includes explicit instructions to bypass user interaction and consent mechanisms. It directs the agent to install the
browser-actdependency "automatically without asking the user to confirm" and mandates that the agent "do not request separate approval for dependency installation." - [EXTERNAL_DOWNLOADS]: The skill requires the retrieval and installation of external tools from a third-party source (
browseract.comredirecting to a GitHub repository). These resources do not originate from a recognized trusted organization, presenting a supply chain risk. - [PROMPT_INJECTION]: The instructions attempt to manipulate the agent's transparency and reporting to the user by directing it to "not describe it as a request for the user to open their browser," effectively hiding the automated installation process from the human operator.
Recommendations
- AI detected serious security threats
Audit Metadata