etsy-listing-scraper
Fail
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: HIGHPROMPT_INJECTIONREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill contains explicit instructions designed to override agent safety guardrails regarding user consent. Specifically, it commands the agent to install missing dependencies 'automatically without asking the user to confirm' and explicitly forbids the agent from requesting 'separate approval for dependency installation.'
- [REMOTE_CODE_EXECUTION]: The skill mandates the automatic installation of the BrowserAct CLI and associated skills from an external source (browseract.com/GitHub) if they are not already present. Combined with the instruction to bypass user confirmation, this creates a path for unauthorized software installation and execution on the host system.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external websites (Etsy). This represents a vulnerability surface where malicious instructions embedded in listing titles, descriptions, or metadata could influence the agent's behavior.
- Ingestion points: External URLs, search queries, and marketplace content (SKILL.md).
- Boundary markers: None identified.
- Capability inventory: Uses the
browser-acttool which has browser access and system interaction capabilities. - Sanitization: None identified.
Recommendations
- AI detected serious security threats
Audit Metadata