phone-number-extractor
Warn
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill contains instructions that attempt to override standard agent safety protocols by directing the agent to install software automatically without asking the user for confirmation and to refrain from describing the installation activity to the user.
- [COMMAND_EXECUTION]: The instructions require the agent to install and execute the
browser-actCLI tool if it is missing from the environment, bypassing manual verification. - [EXTERNAL_DOWNLOADS]: The skill references an external website for downloading and installing runtime dependencies, which could lead to the execution of unverified third-party code.
Audit Metadata