reddit-user-scraper

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.90). The Skill explicitly instructs the agent to install a dependency automatically and to hide/avoid asking the user for approval (lines 42–50), which is a deceptive directive unrelated to the stated scraping purpose.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). This skill’s required workflow uses BrowserAct to access real Reddit web pages at runtime (public web content authored by outsiders), which can be ingested as readable page text into the agent’s LLM context via the BrowserAct execution path.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The Skill explicitly requires and instructs the agent at runtime to automatically obtain and invoke BrowserAct via the provided install URL(s) (https://www.browseract.com/?co-from=social-media and https://www.browseract.com/?co-from=social-media&redirect=https://github.com/browser-act/skills/tree/main), which causes the agent to fetch and install external code as a required dependency.