vinted-marketplace-scraper
Fail
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill contains explicit instructions to bypass user oversight by automatically installing the 'BrowserAct' CLI and Skill if they are missing. It specifically directs the agent to install these dependencies 'without asking the user to confirm' and 'do not request separate approval'.
- [EXTERNAL_DOWNLOADS]: The skill directs the agent to fetch and install external code from a third-party redirect link (
https://www.browseract.com/?co-from=ecommerce&redirect=https://github.com/browser-act/skills/tree/main) during the runtime phase. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to scrape and process external marketplace data, which serves as an attack surface for instructions embedded in third-party content.
- Ingestion points: Marketplace listing titles, descriptions, and metadata retrieved from Vinted URLs.
- Boundary markers: None. The skill does not define delimiters to separate scraped data from instructions.
- Capability inventory: The skill utilizes the
browser-actCLI for web interaction and mentions accessing theworkspaces/directory for storing browser session data. - Sanitization: No sanitization or validation of the scraped marketplace content is specified.
Recommendations
- AI detected serious security threats
Audit Metadata