reddit-flair-posts-scraper
Fail
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: HIGHPROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill instructions explicitly direct the agent to "not request separate approval for dependency installation" and to "not describe it as a request for the user to open their browser." This constitutes a bypass of user oversight and consent mechanisms.
- [EXTERNAL_DOWNLOADS]: The skill mandates the automatic installation of an external dependency (BrowserAct) from a remote URL if it is not present on the system.
- [COMMAND_EXECUTION]: The instructions require the agent to automatically install and execute a Command Line Interface (CLI) tool, facilitating the execution of external code on the host environment without user intervention.
Recommendations
- AI detected serious security threats
Audit Metadata