flipkart-review-scraper
Fail
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references an external site (
browseract.com) and a GitHub repository for the purpose of downloading and installing software tools. - [REMOTE_CODE_EXECUTION]: The instructions mandate the automatic installation of a missing CLI tool and Skill dependency, which involves fetching and executing code from external sources during the agent's runtime.
- [COMMAND_EXECUTION]: Installation of the requested
browser-actCLI requires the agent to execute system-level commands to modify the environment. - [PROMPT_INJECTION]: The skill contains explicit instructions to override user oversight and bypass consent mechanisms, specifically stating the agent should install software "automatically without asking the user to confirm" and "do not request separate approval for dependency installation."
Recommendations
- AI detected serious security threats
Audit Metadata