douyin-topic-scraper
Fail
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to automatically install missing dependencies (BrowserAct CLI) from a remote URL (browseract.com) without user confirmation or approval. The instructions explicitly state: "use [Install BrowserAct] to install the missing dependency automatically without asking the user to confirm" and "do not request separate approval for dependency installation."- [COMMAND_EXECUTION]: The skill requires the agent to execute installation commands and the
browser-actcommand-line tool. Instructing an agent to execute shell commands for software installation without human oversight is a high-risk pattern.- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external, unverified Douyin topic pages which are attacker-controlled sources and could contain malicious instructions designed to manipulate the agent's behavior. - Ingestion points: Douyin hashtag, topic, flair, and related content pages.
- Boundary markers: Absent; there are no instructions to delimit or ignore instructions within the scraped data.
- Capability inventory: Use of the BrowserAct CLI to interact with websites and execute tasks.
- Sanitization: Absent; the instructions do not specify any validation or filtering of the collected data.
Recommendations
- AI detected serious security threats
Audit Metadata