youtube-channel-business-contact-search

Warn

Audited by Gen Agent Trust Hub on Jul 20, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references an external URL (browseract.com) to fetch and install the 'BrowserAct' CLI and associated skills. This source is not recognized as a trusted organization or well-known service.
  • [COMMAND_EXECUTION]: The instructions explicitly direct the agent to perform automatic installation of missing dependencies without asking the user to confirm and specifically state 'do not request separate approval'. This bypasses the user's role in authorizing software installation on their system.
  • [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection.
  • Ingestion points: Reads YouTube channel 'About' pages, video titles, and social profiles (SKILL.md).
  • Boundary markers: Absent; there are no instructions to ignore embedded commands in the scraped data.
  • Capability inventory: Uses the browser-act CLI for live browser interaction and data collection (SKILL.md).
  • Sanitization: Absent; no evidence of filtering or escaping scraped content before processing.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 20, 2026, 04:23 AM
Security Audit — agent-trust-hub — youtube-channel-business-contact-search