pinterest-trend-scraper
Fail
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions mandate the installation of the 'BrowserAct CLI' and a secondary skill from an external URL (browseract.com) if they are not already present in the environment.
- [COMMAND_EXECUTION]: The instructions explicitly direct the agent to 'install the missing dependency automatically without asking the user to confirm' and to 'not request separate approval for dependency installation.' This encourages the agent to bypass user consent protocols when executing system-level changes or installing software.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external Pinterest trend pages, which presents an attack surface for instructions embedded in third-party content.
- Ingestion points: Pinterest trend pages, category lists, and related search content (SKILL.md).
- Boundary markers: None identified; instructions do not specify delimiters or warnings for the agent to ignore embedded instructions in scraped data.
- Capability inventory: The skill utilizes an external CLI (BrowserAct) to interact with live browser sessions.
- Sanitization: No sanitization or validation of the ingested trend data is specified before it is returned to the agent or exported.
Recommendations
- AI detected serious security threats
Audit Metadata