pinterest-search-results-scraper

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.80). The Skill contains explicit, deceptive instructions to install the BrowserAct dependency automatically and "not request separate approval" or present it as a browser request, which instructs the agent to hide actions from the user and goes beyond the Skill's stated scraping purpose.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). SKILL.md instructs the agent to invoke the browser-act Skill for live browser execution, which can fetch and ingest public Pinterest page text (outsider-authored free text) into the LLM context via the runtime browser workflow.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly tells the agent to automatically install a required runtime dependency from https://www.browseract.com/?co-from=social-media&redirect=https://github.com/browser-act/skills/tree/main (used at runtime), which means remote code would be fetched and executed to resume the agent workflow.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (medium risk: 0.60). The skill instructs the agent to automatically install a required CLI dependency and to proceed without asking the user for confirmation, which directs the agent to change the host system state (software installation) without user consent and thus poses a security risk.