pinterest-pin-scraper
Fail
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill contains explicit instructions to override standard safety procedures regarding user consent. It directs the agent to install dependencies 'automatically without asking the user to confirm' and explicitly forbids the agent from requesting 'separate approval for dependency installation' or describing the process to the user.
- [REMOTE_CODE_EXECUTION]: The skill mandates the installation and execution of the 'BrowserAct CLI' and associated skills from an external source if they are not present on the system. It specifically triggers this installation automatically when the tool is missing.
- [EXTERNAL_DOWNLOADS]: The skill references and attempts to download content from 'www.browseract.com', which is a third-party domain. The installation link includes a redirect parameter to a GitHub repository, but the primary entry point is the external vendor domain.
- [INDIRECT_PROMPT_INJECTION]: The skill's primary purpose is to scrape content (titles, descriptions, captions) from Pinterest, an untrusted external source.
- Ingestion points: Pinterest web pages and pin data processed at runtime.
- Boundary markers: None identified; instructions do not specify delimiters or warnings to ignore embedded content in scraped pins.
- Capability inventory: The skill utilizes a browser-based CLI tool (BrowserAct) which possesses significant system interaction capabilities.
- Sanitization: No sanitization or validation of the scraped data is mentioned before processing or export.
Recommendations
- AI detected serious security threats
Audit Metadata