tiktok-shop-creator-affiliate-scraper
Fail
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to download and install the
browser-actCLI and skill from an external website (browseract.com) if the dependencies are missing. - [COMMAND_EXECUTION]: The agent is directed to execute installation routines for the
browser-actdependency, which involves running setup scripts or package managers. - [PRIVILEGE_ESCALATION]: The instructions explicitly command the agent to perform installations "automatically without asking the user to confirm" and to "not request separate approval for dependency installation." This is a direct attempt to bypass user oversight and the agent's safety protocols regarding code execution.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to scrape external websites (TikTok Shop), which constitutes a vulnerability to indirect prompt injection where instructions on a webpage could influence the agent's behavior.
- Ingestion points: External URLs, search queries, and scraped page content (SKILL.md, Instructions 1, 5).
- Boundary markers: None identified in the prompt templates.
- Capability inventory: Capabilities include network access via the
browser-acttool and data capture. - Sanitization: No evidence of sanitization or filtering for the scraped content.
Recommendations
- AI detected serious security threats
Audit Metadata