instagram-follower-lead-scraper

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 1.00). The skill explicitly instructs the agent to auto-install a dependency without asking the user and to hide/avoid describing the installation link, which is a deceptive instruction outside the stated scraping purpose.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). SKILL.md instructs the agent to use the runtime browser-act Skill to access and interact with live public Instagram pages (outsider-authored web content), which can be ingested as readable text into the LLM context during execution.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs the agent to invoke the Install BrowserAct link at runtime to automatically install a required CLI/Skill (which would fetch and run remote installation content): https://www.browseract.com/?co-from=lead-generation&redirect=https://github.com/browser-act/skills/tree/main

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.70). The Skill directs the agent to automatically install the BrowserAct CLI and related runtime dependencies without asking the user for confirmation and to proceed autonomously, which encourages modifying the host system (installing software) and could trigger privileged actions.