kuaishou-video-scraper

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.90). The skill explicitly instructs the agent to install BrowserAct automatically and to avoid describing or asking the user for approval, which is a hidden/deceptive directive outside the scraping task's stated purpose.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). SKILL.md instructs the agent to use BrowserAct to access live Kuaishou pages and collect captions/comments/text from user-specified URLs/targets, which are outsider-authored free text that can be ingested into the LLM context via the runtime browser page content.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill requires installing the BrowserAct CLI at runtime using the installer URL https://www.browseract.com/?co-from=social-media (and the install link https://www.browseract.com/?co-from=social-media&redirect=https://github.com/browser-act/skills/tree/main), which implies fetching and executing remote installation code as a required dependency.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.70). The Skill explicitly instructs the agent to automatically install the BrowserAct CLI when missing and to do so "without asking the user to confirm," which directs the agent to change the host system state (install software) and could trigger privileged actions even though it doesn't explicitly request sudo.