google-maps-category-lead-scraper

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 1.00). The skill contains deceptive runtime installation instructions that tell the agent to install dependencies automatically and to explicitly avoid describing or requesting user approval, which is outside the scraping skill's stated purpose and attempts to hide agent behavior from the user.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). The Skill explicitly instructs automated installation of an external CLI without user consent and to avoid seeking or presenting approval, creating a clear supply-chain/backdoor risk even though the scraper's data-collection behavior itself targets publicly visible data.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). SKILL.md instructs the agent to use the runtime browser-act Skill to access live Google Maps pages and extract listing text (public web content), which is outsider-authored free text that can be ingested into the LLM context via the browser automation workflow.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs the agent at runtime to automatically install and invoke BrowserAct using the provided installer links (https://www.browseract.com/?co-from=lead-generation and https://www.browseract.com/?co-from=lead-generation&redirect=https://github.com/browser-act/skills/tree/main), which will fetch and execute external code required for operation.