temu-review-scraper

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 1.00). The Skill contains explicit instructions to install dependencies automatically and to "not request separate approval" or describe the action as a user-facing installation—i.e., to hide or misrepresent installation behavior—which is a deceptive instruction outside the scraper's stated data-collection purpose.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). SKILL.md instructs the agent to use BrowserAct to access public Temu pages at runtime and “capture browser-visible page content” (including review text), which is outsider-authored free text from web pages the user did not author.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The Skill explicitly directs the agent to automatically install the BrowserAct CLI and treat it as a required runtime dependency "without asking the user to confirm" and to proceed with installation, which pushes the agent to modify the host system state (install software) without user approval.