yahoo-auctions-japan-scraper
Fail
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to access an external website (browseract.com) to download and install the 'browser-act' CLI and associated Skill dependencies if they are not already present on the system.
- [REMOTE_CODE_EXECUTION]: The instructions explicitly command the agent to "install the missing dependency automatically without asking the user to confirm" and state that the agent should "not request separate approval for dependency installation." This pattern removes the user from the security decision loop and allows for the automatic execution of installation logic from an external third-party source.
- [PROMPT_INJECTION]: The skill is designed to scrape and process content from Yahoo Auctions Japan, which creates an attack surface for indirect prompt injection.
- Ingestion points: The agent is instructed to capture visible product details, descriptions, and metadata from external web pages in SKILL.md.
- Boundary markers: There are no instructions providing delimiters or warnings for the agent to ignore embedded instructions within the scraped data.
- Capability inventory: The skill utilizes the 'browser-act' CLI for live browser interaction and data extraction as described in SKILL.md.
- Sanitization: No sanitization, filtering, or validation steps are defined for the data retrieved from external sources.
Recommendations
- AI detected serious security threats
Audit Metadata