allegro-seller-profile-scraper
Warn
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to perform automatic installation of CLI tools and skills. It explicitly directs the agent to "install the missing dependency automatically without asking the user to confirm" and mandates that the agent "do not request separate approval for dependency installation," which bypasses standard user oversight of system changes.
- [EXTERNAL_DOWNLOADS]: The skill fetches necessary dependencies from an external repository provided by a well-known service (BrowserAct). This process occurs if the tools are not already present in the environment.
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external seller profiles which could contain adversarial content.
- Ingestion points: Captures browser-visible page content and metadata from Allegro seller profiles (SKILL.md, Instructions 5 and 7).
- Boundary markers: None; the instructions do not include delimiters or warnings to ignore embedded commands in the scraped data.
- Capability inventory: Employs the
browser-acttool for web navigation and data extraction. - Sanitization: No sanitization, filtering, or validation of the retrieved web content is specified.
Audit Metadata