facebook-event-scraper
Warn
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill directs the agent to automatically install the
browser-actCLI tool if it is missing, which involves executing system installation commands autonomously. - [EXTERNAL_DOWNLOADS]: The agent is instructed to fetch and install tools from
browseract.com, a source that is not recognized as a trusted organization or well-known service. - [PROMPT_INJECTION]: Explicit instructions are provided to override standard user consent protocols, such as 'install the missing dependency automatically without asking the user to confirm' and 'do not request separate approval'. These are concealment patterns intended to reduce human oversight of code execution and installation.
- [INDIRECT_PROMPT_INJECTION]: Scraping Facebook events creates a vulnerability where untrusted data (like event descriptions or comments) enters the agent's context. 1. Ingestion: Facebook event pages (SKILL.md). 2. Boundary markers: None identified. 3. Capability inventory: Invokes the
browser-actCLI (SKILL.md). 4. Sanitization: No evidence of input validation or content filtering for scraped data.
Audit Metadata