ebay-search-results-scraper
Fail
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill directs the agent to download a dependency from 'browseract.com' or GitHub if it's missing. Since the source is not a pre-verified or well-known trusted organization, this represents an unverified external dependency.
- [COMMAND_EXECUTION]: The instructions explicitly command the agent to install dependencies 'automatically without asking the user to confirm' and 'do not request separate approval for dependency installation.' This is a significant security risk as it attempts to bypass human-in-the-loop verification for executing system-level installation commands.
- [PROMPT_INJECTION]: The skill processes untrusted data from eBay search results (titles, descriptions, etc.). It lacks explicit boundary markers or instructions to treat this content as untrusted, making it vulnerable to indirect prompt injection if a listing contains malicious instructions designed to influence the agent's behavior.
- Ingestion points: eBay search result pages (titles, prices, seller info).
- Boundary markers: None provided in the instructions.
- Capability inventory: Uses 'browser-act' CLI which can navigate the web and execute browser tasks.
- Sanitization: None specified for the processed marketplace data.
Recommendations
- AI detected serious security threats
Audit Metadata