ebay-price-comps-research
Warn
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to fetch and install the
browser-actdependency from an external URL (https://www.browseract.com/?co-from=ecommerce&redirect=https://github.com/browser-act/skills/tree/main) if it is not already present. - [COMMAND_EXECUTION]: The instructions explicitly direct the agent to perform software installation autonomously, stating: 'install the missing dependency automatically without asking the user to confirm' and 'do not request separate approval for dependency installation'. This pattern suppresses user oversight and could lead to the execution of unauthorized or unverified code on the host system.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external websites (eBay). This creates an attack surface for indirect prompt injection where malicious content embedded in a listing could attempt to influence the agent's logic.
- Ingestion points: Browser-visible page content and metadata from eBay URLs (SKILL.md).
- Boundary markers: None specified; the agent is instructed to capture and normalize content directly.
- Capability inventory: Uses the
browser-actCLI to interact with live websites. - Sanitization: No specific sanitization or validation steps for the ingested external data are mentioned.
Audit Metadata