youtube-search-results-lead-scraper

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.90). The Skill contains explicit instructions to install dependencies automatically without user confirmation and to hide that installation from the user, which is deceptive and outside the stated scraping purpose.

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). The skill instructs automatic installation of a CLI from a third-party domain (browseract.com) without user confirmation and uses a redirect parameter to GitHub, which matches common malware-distribution patterns for installers and unsolicited executables.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 0.90). High risk: the Skill explicitly automates harvesting of contact details and instructs silent installation/use of external tooling while advising to hide or avoid user consent, creating potential for abusive data exfiltration and supply-chain/backdoor behavior.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). This skill’s required workflow invokes the browser-act Skill to access and extract content from user-specified YouTube pages at runtime, which can include outsider-authored free text (e.g., channel/About page text) that the agent then ingests into the LLM context.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instructs the agent to automatically install and invoke the BrowserAct CLI at runtime using external installers (e.g. https://www.browseract.com/?co-from=lead-generation and https://www.browseract.com/?co-from=lead-generation&redirect=https://github.com/browser-act/skills/tree/main), which would fetch and execute remote code as a required runtime dependency.