youtube-video-lead-scraper
Warn
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill contains instructions designed to bypass user oversight, specifically directing the agent to install dependencies "automatically without asking the user to confirm" and explicitly stating "do not request separate approval for dependency installation."
- [EXTERNAL_DOWNLOADS]: The instructions mandate the automatic installation of the "BrowserAct CLI" from an external domain (browseract.com) if it is missing from the environment, potentially introducing unvetted third-party code.
Audit Metadata