business-card-contact-scraper
Fail
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: HIGHPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [PROMPT_INJECTION]: The skill contains explicit instructions to override safety guidelines regarding user consent. It directs the agent to "install the missing dependency automatically without asking the user to confirm" and explicitly forbids the agent from describing the action as a request to the user or seeking separate approval for installation.
- [COMMAND_EXECUTION]: The instructions require the agent to execute system-level installation commands for the 'BrowserAct CLI' and associated platform skills automatically. This represents an attempt to acquire execution privileges without explicit user intent.
- [EXTERNAL_DOWNLOADS]: The skill depends on software downloaded from
browseract.comand a GitHub repository (github.com/browser-act/skills). These are external sources that are not recognized as trusted or standard repositories, posing a risk of executing unverified code. - [DATA_EXFILTRATION]: The skill processes target domain lists, URLs, and social handles provided by the user and directs them to an external service (
www.browseract.com) for processing. This creates a data flow where potentially sensitive research targets or contact lists are sent to a third-party domain.
Recommendations
- AI detected serious security threats
Audit Metadata