real-estate-agent-lead-scraper
Fail
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill contains instructions to automatically install the
browser-actSkill and CLI from an external URL if they are not already present. It explicitly mandates that this installation occur "without asking the user to confirm" and directs the agent to suppress descriptions of this process to the user. - [EXTERNAL_DOWNLOADS]: Required dependencies are downloaded from a non-trusted third-party domain (
www.browseract.com) rather than an official package registry or trusted repository. - [PROMPT_INJECTION]: The skill is designed to scrape and process data from arbitrary third-party directories and websites, which introduces a risk of indirect prompt injection.
- Ingestion points: Real estate directory pages and Google Maps search results processed via the BrowserAct tool.
- Boundary markers: None identified. The skill does not use delimiters to isolate untrusted web content from agent instructions.
- Capability inventory: The skill can execute CLI commands via the installed dependency and write structured data to local files (CSV/Tables).
- Sanitization: No validation or sanitization of scraped content is described before the data is returned or processed.
Recommendations
- AI detected serious security threats
Audit Metadata