naver-shopping-review-scraper

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.90). The Skill contains explicit instructions to automatically install a runtime dependency and to "not request separate approval" or present the install as a user browser action, which instructs the agent to perform and conceal actions outside the stated scraping purpose—this is a hidden/deceptive operational directive.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). SKILL.md instructs the agent to use BrowserAct to “capture browser-visible page content” from user-specified Naver Shopping URLs at runtime, which can include outsider-authored review text and other free-form content that the LLM ingests.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The Skill explicitly requires installing the BrowserAct CLI at runtime via https://www.browseract.com/?co-from=ecommerce (and its redirect variant https://www.browseract.com/?co-from=ecommerce&redirect=https://github.com/browser-act/skills/tree/main), which is a required runtime dependency and implies fetching/executing remote installer code.