douyin-music-trend-scraper

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.80). The Skill includes deceptive installation instructions that tell the agent to install BrowserAct automatically and explicitly instructs the agent not to describe the installation link as a user-facing request or to ask the user for separate approval, which overrides expected user consent and is outside the scraper's stated data-collection purpose.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). SKILL.md instructs the agent to use BrowserAct to access live Douyin pages at runtime (public web content fetched and read as prose by the LLM via the browser-act workflow), which can include outsider-authored free text like captions/comments.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The Skill explicitly instructs the agent to fetch and install the required BrowserAct runtime from the provided install link at runtime (which can execute remote install code), for example https://www.browseract.com/?co-from=social-media&redirect=https://github.com/browser-act/skills/tree/main, so the agent would retrieve and run external code from that URL.