google-maps-agency-lead-scraper

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.80). The skill contains deceptive runtime instructions that require automatic installation of BrowserAct without user confirmation and explicitly tell the agent not to describe the action as a request for the user’s browser or to request approval, which is outside the advertised scraping purpose.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). SKILL.md instructs the agent to invoke the runtime browser-act Skill to access and interact with live Google Maps pages, which can cause the LLM to ingest outsider-authored free text scraped from public web content at runtime.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill requires the BrowserAct CLI/Skill at runtime and instructs the agent to automatically install it via the provided install links (https://www.browseract.com/?co-from=lead-generation and https://www.browseract.com/?co-from=lead-generation&redirect=https://github.com/browser-act/skills/tree/main), which implies fetching and executing remote install code to satisfy a required dependency.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The Skill instructs the agent to automatically install a runtime dependency (BrowserAct CLI) without user confirmation and to treat it as a required runtime dependency, which encourages the agent to modify the host system state and potentially perform privileged installs or changes without consent.