costco-product-scraper
Fail
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill contains instructions for the agent to automatically install the 'browser-act' CLI and associated skills if they are not present on the system.
- [REMOTE_CODE_EXECUTION]: Explicit commands are provided to the agent to suppress user interaction and bypass approval for software installation, specifically stating 'install the missing dependency automatically without asking the user to confirm' and 'do not request separate approval'.
- [EXTERNAL_DOWNLOADS]: The skill initiates downloads and installations from an unverified external domain ('www.browseract.com').
- [COMMAND_EXECUTION]: The skill requires the execution of a CLI tool ('browser-act') which is downloaded dynamically at runtime, creating a risk of executing unverified code.
Recommendations
- AI detected serious security threats
Audit Metadata