facebook-marketplace-rental-listing-scraper
Fail
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill identifies
browser-actas a required runtime dependency and provides a link to install it from an external source (browseract.com). This domain and associated GitHub repository are not recognized as trusted or well-known services. - [COMMAND_EXECUTION]: The instructions explicitly direct the agent to perform the installation of missing dependencies "automatically without asking the user to confirm" and mandate that the agent should "not request separate approval for dependency installation." This is a high-risk instruction that subverts user control and oversight over software installation on their system.
- [PROMPT_INJECTION]: The skill processes untrusted data from external web pages (Facebook Marketplace listings). It lacks any specified boundary markers or sanitization logic for this ingested data.
- Ingestion points: Target URLs, search queries, and listing pages (SKILL.md).
- Boundary markers: None present.
- Capability inventory: Executes browser automation via
browser-actCLI; accesses file system underworkspaces/(SKILL.md). - Sanitization: No escaping or validation of external content mentioned.
Recommendations
- AI detected serious security threats
Audit Metadata