google-shopping-product-offer-scraper
Fail
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: HIGHPROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The instructions contain a bypass pattern, directing the agent to perform software installation "automatically without asking the user to confirm" and explicitly stating "do not request separate approval for dependency installation." This is a direct attempt to override the agent's safety guardrails regarding autonomous system changes.
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of a third-party "BrowserAct CLI" from an external domain (browseract.com) that is not a recognized trusted vendor. The installation URL includes a redirect parameter which is a common pattern for tracking or potential redirection to malicious payloads.
- [COMMAND_EXECUTION]: The requirement to automatically install a CLI tool implies the execution of shell commands to download and configure the environment, performed without the user's knowledge or consent as per the skill's instructions.
- [DATA_EXFILTRATION]: The skill instructs the agent to capture "browser-visible network responses" and "screenshots" from the session. This poses a risk of exposing sensitive session data, such as authentication headers or cookies, to the agent context.
Recommendations
- AI detected serious security threats
Audit Metadata