google-shopping-price-comparison-scraper

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow involves web scraping and browsing arbitrary pages via BrowserAct, which is classified as low risk since the agent actively fetches specific URLs or search results rather than consuming an unselected incoming feed.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill instructs automatic installation of external instructions and code from a third-party GitHub repository via a web redirect URL, presenting a weak and arbitrary operational dependency.