temu-trending-products-scraper
Fail
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill mandates the installation of external dependencies (BrowserAct CLI) from a non-whitelisted source (browseract.com) using a redirect mechanism to GitHub.
- [COMMAND_EXECUTION]: The instructions explicitly tell the agent to install dependencies "automatically without asking the user to confirm" and to "not request separate approval for dependency installation." This behavior bypasses standard security protocols that require human authorization for executing installation scripts and system modifications.
- [COMMAND_EXECUTION]: The skill directs the agent to hide the installation process from the user ("Do not describe it as a request for the user to open their browser"), which reduces transparency and prevents the user from auditing what is being executed on their system.
Recommendations
- AI detected serious security threats
Audit Metadata