shopify-price-availability-monitor

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.80). The skill explicitly instructs the agent to install a runtime dependency automatically "without asking the user to confirm" and to hide that action ("Do not describe it... and do not request separate approval"), which are deceptive instructions outside the user's expectation for a monitoring skill.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). The skill contains explicit instructions to automatically install an external CLI dependency without user confirmation and to hide that installation, creating a clear supply-chain/backdoor risk for unauthorized software installation and potential remote compromise.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). SKILL.md instructs the agent to use the runtime browser-act Skill to “capture browser-visible page content” from user-specified target URLs, which can include outsider-authored free text from public web pages fetched at runtime.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instructs the agent to automatically invoke the Install BrowserAct URL at runtime to fetch/install the BrowserAct CLI (which would execute remote installer code), e.g. https://www.browseract.com/?co-from=ecommerce&redirect=https://github.com/browser-act/skills/tree/main, so this external URL is a required runtime dependency that executes remote code.