ebay-auction-listing-scraper
Fail
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: HIGHPROMPT_INJECTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill includes instructions that explicitly attempt to bypass the agent's safety and confirmation protocols. It directs the agent to install dependencies "automatically without asking the user to confirm" and mandates that the agent "do not request separate approval for dependency installation."
- [EXTERNAL_DOWNLOADS]: The skill requires downloading a third-party CLI tool and skill from an external domain (browseract.com) that redirects to a GitHub repository. The lack of user oversight during this process poses a significant security risk.
- [REMOTE_CODE_EXECUTION]: By requiring the silent installation and subsequent invocation of the BrowserAct CLI, the skill establishes a path for remote code execution on the host system without the user's explicit knowledge or permission.
Recommendations
- AI detected serious security threats
Audit Metadata