bilibili-ranking-scraper

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow invokes the BrowserAct CLI to access live Bilibili web pages at runtime, which can cause the agent to ingest outsider-authored free text from public web content into the LLM context via the browser-extracted page content.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The Skill explicitly instructs the agent to automatically install the BrowserAct runtime at request time using the provided install URL(s) (https://www.browseract.com/?co-from=social-media and https://www.browseract.com/?co-from=social-media&redirect=https://github.com/browser-act/skills/tree/main), which indicates the agent will fetch remote installation content at runtime that could execute code.