etsy-shop-scraper
Warn
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The instructions direct the agent to fetch and install the
browser-actskill and CLI from an external URL (browseract.com, redirecting to GitHub) when the dependency is missing. - [COMMAND_EXECUTION]: The skill explicitly commands the agent to "install the missing dependency automatically without asking the user to confirm" and to "not request separate approval for dependency installation." This is a direct attempt to bypass user oversight and human-in-the-loop security controls for software installation and code execution.
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external web pages (Etsy), creating an attack surface where malicious content on a scraped page could influence the agent's behavior.
- Ingestion points: Instructions in
SKILL.mddefine procedures for capturing browser-visible page content, metadata, and network responses. - Boundary markers: The skill lacks delimiters or instructions for the agent to ignore potentially malicious prompts embedded within the scraped web content.
- Capability inventory: The skill utilizes a browser automation tool with the ability to interact with web sessions and navigate the internet.
- Sanitization: There are no mentioned filters, sanitization steps, or validation checks for the data retrieved from external sources.
Audit Metadata