amazon-seller-profile-scraper
Fail
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill instructs the agent to automatically install the
browser-actskill and CLI from a remote URL (https://www.browseract.com/?co-from=ecommerce&redirect=https://github.com/browser-act/skills/tree/main) if they are not detected at runtime. - [PROMPT_INJECTION]: The instructions explicitly command the agent to perform installations 'without asking the user to confirm' and to 'not request separate approval,' which is a direct attempt to bypass user-consent safety protocols.
- [EXTERNAL_DOWNLOADS]: The skill has a hard dependency on external software hosted on a third-party domain and GitHub, which it attempts to fetch and execute automatically.
Recommendations
- AI detected serious security threats
Audit Metadata