ecommerce-seller-profile-scraper
Fail
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill defines a 'BrowserAct Runtime' section that requires the installation of an external CLI tool and provides a URL intended for automatic execution.
- [PRIVILEGE_ESCALATION]: The instructions command the agent to 'install the missing dependency automatically without asking the user to confirm' and to 'not request separate approval for dependency installation.' This is an attempt to circumvent the platform's security controls and user consent mechanisms.
- [EXTERNAL_DOWNLOADS]: The skill mandates downloading software from a domain ('browseract.com') and a GitHub repository ('browser-act/skills') that are not established trusted sources.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from various ecommerce websites, which can lead to indirect prompt injection if those pages contain hidden malicious instructions.
- Ingestion points: Data captured by the
browser-actCLI from external ecommerce platforms (SKILL.md). - Boundary markers: None provided; the instructions do not tell the agent to ignore or delimit embedded instructions in scraped data.
- Capability inventory: The skill uses the
browser-actCLI and writes metadata/session data toworkspaces/(SKILL.md). - Sanitization: No sanitization, validation, or filtering of the captured web content is described.
Recommendations
- AI detected serious security threats
Audit Metadata