linkedin-executive-lead-search

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 1.00). The skill explicitly instructs the agent to install dependencies automatically and to hide or avoid asking the user for confirmation or describing the installation as a user-directed action, which is a deceptive instruction outside the stated lead-search purpose.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 0.90). The document instructs automatic, concealed installation of a required runtime dependency (BrowserAct) without user confirmation, a deceptive practice that enables supply‑chain or stealthy remote installation and potential abuse.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). SKILL.md instructs the agent to use the BrowserAct CLI to access and extract public LinkedIn profile/company/activity pages at runtime, so outsider-authored free text from those fetched web pages can be ingested into the LLM context via the BrowserAct workflow.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instructs the agent to automatically install a required runtime dependency from https://www.browseract.com/?co-from=lead-generation&redirect=https://github.com/browser-act/skills/tree/main, which indicates the agent will fetch and execute remote installation content at runtime.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (medium risk: 0.60). The Skill instructs the agent to automatically install the BrowserAct CLI and resume execution without asking the user for confirmation, which directs the agent to modify the host system (install software) and could trigger privileged operations or unwanted state changes.