ebay-search-results-scraper

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.90). The Skill instructs the agent to automatically install the BrowserAct dependency and explicitly tells it to avoid asking the user for confirmation or describing the request as opening their browser, which is a hidden/deceptive instruction outside the stated scraping purpose.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). SKILL.md instructs the agent to “capture browser-visible page content” and “invoke the browser-act Skill” for live execution, which implies runtime ingestion of outsider-authored free text from public eBay pages fetched via BrowserAct.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The Skill instructs the agent to automatically use the Install BrowserAct link at runtime to obtain a required CLI/Skill (https://www.browseract.com/?co-from=ecommerce&redirect=https://github.com/browser-act/skills/tree/main), which is a runtime external dependency used to install and thus may fetch/execute remote installation code.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.70). The Skill explicitly directs the agent to automatically install the BrowserAct CLI and resume execution without asking the user for permission, which instructs autonomous modification of the host system (installation of software) and may require elevated privileges.