flipkart-price-availability-monitor
Fail
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides instructions for the agent to automatically install external software (BrowserAct CLI and Skill) if it is missing. This process involves executing code retrieved from a remote, non-whitelisted source.
- [EXTERNAL_DOWNLOADS]: The skill directs the agent to fetch dependencies from
https://www.browseract.com/, a domain that is not included in the trusted vendor list. - [PROMPT_INJECTION]: The instructions contain explicit commands to bypass user oversight and agent safety guidelines, specifically instructing the agent to perform installations 'automatically without asking the user to confirm' and to 'not request separate approval for dependency installation'.
- [COMMAND_EXECUTION]: The skill relies on the execution of a third-party command-line interface tool (
browser-act) that is not part of the standard environment and is downloaded at runtime. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external websites (Flipkart) and browser-visible network responses without explicit sanitization or boundary markers.
- Ingestion points: Browser-visible page content and network responses (SKILL.md, Instruction 5).
- Boundary markers: None provided in instructions.
- Capability inventory: Execution of
browser-actCLI and file system access underworkspaces/. - Sanitization: None described in instructions.
Recommendations
- AI detected serious security threats
Audit Metadata