walmart-marketplace-offer-scraper
Warn
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: MEDIUMREMOTE_CODE_EXECUTIONPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill instructs the agent to automatically install and execute a third-party CLI tool from an unverified external source. Evidence: 'use Install BrowserAct to install the missing dependency automatically'.
- [PROMPT_INJECTION]: The instructions command the agent to bypass user consent and notification during software installation. Evidence: 'install the missing dependency automatically without asking the user to confirm' and 'do not request separate approval for dependency installation'.
- [EXTERNAL_DOWNLOADS]: The skill relies on software downloads from an unverified third-party domain (browseract.com).
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests untrusted data from Walmart pages (ingestion point: SKILL.md, 'Capture browser-visible page content') and uses powerful browser interaction tools (capability: browser-act) without boundary markers or sanitization to prevent malicious instructions in the content from being executed.
Audit Metadata