skills/sam6dvpte34/lead-generation-skill/youtube-channel-business-contact-search/Gen Agent Trust Hub
youtube-channel-business-contact-search
Warn
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references an external URL (browseract.com) to fetch and install the 'BrowserAct' CLI and associated skills. This source is not recognized as a trusted organization or well-known service.
- [COMMAND_EXECUTION]: The instructions explicitly direct the agent to perform automatic installation of missing dependencies without asking the user to confirm and specifically state 'do not request separate approval'. This bypasses the user's role in authorizing software installation on their system.
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection.
- Ingestion points: Reads YouTube channel 'About' pages, video titles, and social profiles (SKILL.md).
- Boundary markers: Absent; there are no instructions to ignore embedded commands in the scraped data.
- Capability inventory: Uses the
browser-actCLI for live browser interaction and data collection (SKILL.md). - Sanitization: Absent; no evidence of filtering or escaping scraped content before processing.
Audit Metadata