linkedin-title-search-scraper

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 1.00). The Skill instructs the agent to install BrowserAct automatically without asking the user and to hide/obfuscate the installation link (do not describe it as a request), which are deceptive instructions outside the declared scraping purpose.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). SKILL.md instructs the agent to invoke the browser-act Skill for live browser execution against LinkedIn/public pages (outsider-authored free text from fetched web content can be ingested into the LLM context via the runtime browser workflow).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill explicitly instructs the agent at runtime to install and invoke BrowserAct using the install link https://www.browseract.com/?co-from=lead-generation&redirect=https://github.com/browser-act/skills/tree/main, which would fetch/execute remote installation code and thereby control the agent's runtime behavior.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (medium risk: 0.60). The Skill instructs the agent to automatically install the BrowserAct CLI and resume execution without asking the user for confirmation, which directs the agent to modify the host system state (install software) without explicit user approval.