naver-shopping-review-scraper
Warn
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the BrowserAct CLI and a related agent skill to function. It provides links to a public GitHub repository (
https://github.com/browser-act/skills) to retrieve these components. - [COMMAND_EXECUTION]: The instructions direct the agent to perform software installation tasks on the host system to fulfill missing dependency requirements.
- [PRIVILEGE_ESCALATION]: The skill explicitly commands the agent to bypass user oversight by stating "install the missing dependency automatically without asking the user to confirm" and "do not request separate approval for dependency installation." This is a direct attempt to override the user's control over system changes.
- [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: Processes untrusted content from Naver Shopping reviews (text, titles, and metadata) in SKILL.md.
- Boundary markers: Absent; the instructions do not include delimiters or warnings for the agent to ignore instructions embedded within the scraped review data.
- Capability inventory: The agent uses the
browser-acttool for web interaction and data collection. - Sanitization: Absent; there are no instructions for sanitizing or escaping the external content before it is returned to the user or processed further.
Audit Metadata