facebook-reels-scraper
Fail
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill mandates the download and installation of a remote dependency (
browser-actCLI) from an external website (www.browseract.com) if it is not already present on the system. - [COMMAND_EXECUTION]: The instructions require the agent to execute installation commands automatically to resolve missing dependencies, which involves system-level changes.
- [PROMPT_INJECTION]: The skill contains instructions designed to bypass user oversight and agent safety guardrails. Specifically, it tells the agent to install software "without asking the user to confirm" and explicitly states "do not request separate approval for dependency installation."
- [DATA_EXPOSURE]: While the skill advises keeping sensitive data like cookies and account information in the
workspaces/directory (a standard practice), its primary mechanism relies on browser automation which can be used to access sensitive session data if not carefully managed.
Recommendations
- AI detected serious security threats
Audit Metadata