ecommerce-shipping-fee-scraper
Warn
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: MEDIUMPROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill contains instructions that explicitly direct the agent to bypass standard safety protocols and user consent. It states that the agent should "install the missing dependency automatically without asking the user to confirm" and must "not request separate approval for dependency installation." This is a deliberate attempt to suppress user oversight.
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of an external "BrowserAct CLI" and a secondary skill from a third-party repository (
github.com/browser-act/skills). These dependencies originate from an unverified source. - [COMMAND_EXECUTION]: By directing the agent to perform automatic installations, the skill facilitates the execution of unverified shell commands or package management tasks without human review or approval.
Audit Metadata