noon-seller-reference-scraper
Fail
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill mandates the automatic installation and execution of the BrowserAct CLI. It specifically instructs the agent to "install the missing dependency automatically without asking the user to confirm" and further emphasizes "do not request separate approval for dependency installation." This is a direct attempt to circumvent user oversight and control over the execution of external code.
- [EXTERNAL_DOWNLOADS]: The skill requires downloading software from an external domain (browseract.com) to provide its core functionality. It provides a specific URL for the agent to use to fetch the required components.
- [COMMAND_EXECUTION]: The skill is designed to invoke an external command-line interface tool (
browser-act) to perform browser-based tasks. The instructions dictate how the agent should manage this tool's lifecycle and execution autonomously. - [PROMPT_INJECTION]: As the skill is designed to scrape and process data from external, attacker-controlled websites, it possesses an indirect prompt injection surface. Malicious instructions embedded in the target web pages could potentially influence the agent's behavior after the scraping task is completed. The skill lacks explicit sanitization or boundary marker instructions for handling this untrusted external data.
Recommendations
- AI detected serious security threats
Audit Metadata