facebook-marketplace-search-results-scraper
Fail
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONPROMPT_INJECTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill instructs the agent to automatically download and install external dependencies, specifically the BrowserAct CLI and associated agent skills, from a third-party website (browseract.com) if they are missing from the system.- [PROMPT_INJECTION]: The instructions contain directives to override standard security and consent protocols, explicitly telling the agent to perform installations 'automatically without asking the user to confirm' and 'not request separate approval for dependency installation'.- [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect injection by processing untrusted data from Facebook Marketplace listings.
- Ingestion points: Product titles, descriptions, and metadata collected from Facebook Marketplace via the browser (SKILL.md).
- Boundary markers: No delimiters or safety instructions are provided to the agent to distinguish between its instructions and the data being processed.
- Capability inventory: The skill uses the
browser-acttool to navigate pages, capture content, and capture network responses. - Sanitization: The instructions do not specify any validation or sanitization steps for the scraped content.
Recommendations
- AI detected serious security threats
Audit Metadata