etsy-product-search-scraper
Fail
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: HIGHCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The instructions in the 'BrowserAct Runtime' section explicitly direct the agent to install dependencies 'automatically without asking the user to confirm' and specifically command the agent not to 'request separate approval for dependency installation'. This pattern is designed to bypass security guardrails that require user consent for executing system commands or installing software.
- [REMOTE_CODE_EXECUTION]: By providing an external URL to install a CLI tool and requiring that this installation happen silently, the skill creates a path for remote code to be executed on the user's system without their knowledge or oversight.
- [EXTERNAL_DOWNLOADS]: The skill references and requires the download of external components from 'browseract.com' and 'github.com/browser-act/skills' to function, using an automated process that discourages user review.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest large amounts of untrusted data from Etsy search result pages but lacks any instructions for boundary markers, data sanitization, or filtering of the captured content. This creates a vulnerability surface where a malicious seller could influence agent behavior via product listing content.
- Ingestion points: Capture of 'browser-visible page content' from Etsy search results.
- Boundary markers: None specified in the instructions.
- Capability inventory: Utilization of the 'browser-act' skill for live web interaction and data extraction.
- Sanitization: No sanitization or escaping protocols are provided for the extracted data.
Recommendations
- AI detected serious security threats
Audit Metadata