aws-marketplace-scraper
Fail
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill instructs the agent to "install the missing dependency automatically without asking the user to confirm" when the BrowserAct CLI is unavailable, directing the agent to download and run scripts from github.com/browser-act/skills.
- [COMMAND_EXECUTION]: The instructions explicitly tell the agent to "not describe it as a request for the user to open their browser, and do not request separate approval for dependency installation," attempting to suppress user oversight of shell command execution.
- [EXTERNAL_DOWNLOADS]: The skill relies on external components hosted at www.browseract.com and github.com/browser-act/skills.
- [INDIRECT_PROMPT_INJECTION]: 1. Ingestion points: External URLs and marketplace content (SKILL.md). 2. Boundary markers: Absent; no instructions to ignore malicious prompts embedded in scraped data. 3. Capability inventory: Browser interaction via CLI, network response capture, and file system access (SKILL.md). 4. Sanitization: Absent; no validation or filtering of content retrieved from the web.
Recommendations
- AI detected serious security threats
Audit Metadata