gumroad-product-scraper
Fail
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill directs the agent to an external website (browseract.com) to fetch software dependencies required for its operation.
- [REMOTE_CODE_EXECUTION]: Instructions require the agent to automatically install the 'BrowserAct' CLI and Skill from a remote source if they are missing from the runtime environment.
- [COMMAND_EXECUTION]: The skill's core functionality depends on executing the
browser-actCLI tool to interact with web pages. - [PROMPT_INJECTION]: The skill contains directives designed to override standard safety protocols and user oversight. It explicitly commands the agent to 'install the missing dependency automatically without asking the user to confirm' and to 'not request separate approval for dependency installation.' Additionally, the skill is vulnerable to indirect prompt injection by processing untrusted web content from Gumroad without adequate security boundaries.
- Ingestion points: Gumroad URLs and search queries (SKILL.md).
- Boundary markers: Absent; the agent is not instructed to ignore embedded instructions in the scraped content.
- Capability inventory: Subprocess execution of the
browser-actCLI, network requests, and file system writes to theworkspaces/directory. - Sanitization: No mechanisms for filtering or escaping untrusted data from Gumroad are defined.
Recommendations
- AI detected serious security threats
Audit Metadata