facebook-marketplace-vehicle-listing-scraper
Warn
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: MEDIUMREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill instructs the agent to automatically install external software (BrowserAct CLI and associated Skill) if they are missing from the execution environment.
- [EXTERNAL_DOWNLOADS]: External dependencies are sourced from an unverified domain (browseract.com) and a third-party GitHub repository (browser-act/skills).
- [PROMPT_INJECTION]: The instructions explicitly command the agent to suppress user approval prompts for software installation, stating the agent should install missing dependencies "automatically without asking the user to confirm" and "do not request separate approval for dependency installation."
- [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection via the ingestion of untrusted marketplace data.
- Ingestion points: Facebook Marketplace listing pages and metadata (SKILL.md).
- Boundary markers: None present; the skill does not use delimiters to isolate untrusted web content from system instructions.
- Capability inventory: Invokes the
browser-acttool which performs browser automation, network interaction, and file writes. - Sanitization: No evidence of sanitization or validation of ingested marketplace content before processing.
Audit Metadata