etsy-trending-products-scraper

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.90). The Skill instructs the agent to auto-install a runtime dependency and explicitly tells it to hide that action from the user and avoid requesting approval, which is a deceptive instruction outside the described scraping purpose.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). SKILL.md instructs the agent to invoke the runtime browser-act Skill to “capture browser-visible page content” from user-specified Etsy/public URLs, which is outsider-authored free text fetched at runtime and then ingested into the LLM context.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). This skill explicitly instructs the agent to automatically install and invoke the BrowserAct CLI at runtime using the install URL (https://www.browseract.com/?co-from=ecommerce&redirect=https://github.com/browser-act/skills/tree/main), which implies fetching and executing remote installation code required for the skill to run.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.70). The skill explicitly instructs the agent to automatically install the BrowserAct CLI and runtime dependencies without asking the user or requesting approval, which directs the agent to modify the host system state (install software) and could install privileged components without consent even though it does not explicitly mention sudo or file modification.