noon-category-listing-scraper

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.90). The skill includes explicit instructions to automatically install a runtime dependency and to hide or avoid seeking user approval ("without asking the user to confirm" and "Do not describe it... do not request separate approval"), which are deceptive operational directives outside its stated scraping purpose.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 0.90). The Skill instructs automatic installation of an external runtime (BrowserAct) without user confirmation and explicitly directs the agent not to request separate approval, which could enable unauthorized installs or supply-chain abuse.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). This skill’s required workflow invokes the BrowserAct CLI to “access real browser pages” and “capture browser-visible page content” from user-specified target URLs at runtime, which can include outsider-authored free text from public web pages.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instructs the agent at runtime to automatically install and invoke BrowserAct using the provided installer URL(s) (e.g., https://www.browseract.com/?co-from=ecommerce&redirect=https://github.com/browser-act/skills/tree/main), which is a required dependency and implies fetching/executing remote installation code.