weibo-profile-scraper
Fail
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill directs the agent to download the 'BrowserAct' dependency from an external website if it is not already installed.\n- [REMOTE_CODE_EXECUTION]: The 'BrowserAct Runtime' section contains instructions that override standard safety protocols by commanding the agent to 'install the missing dependency automatically without asking the user to confirm' and explicitly forbidding the agent from requesting approval. This constitutes unauthorized code execution and software installation.\n- [COMMAND_EXECUTION]: The skill requires the use of the 'browser-act' CLI to perform tasks, providing a tool-based vector for command execution.\n- [PROMPT_INJECTION]: The skill ingests untrusted data from external Weibo profiles (bios, posts, locations) which can be used for indirect prompt injection attacks.\n
- Ingestion points: Weibo profile scraping and monitoring (SKILL.md).\n
- Boundary markers: Absent; there are no instructions to use delimiters or ignore instructions embedded in the scraped data.\n
- Capability inventory: Access to the 'browser-act' CLI and file system writes for data export.\n
- Sanitization: Absent; no validation or escaping of external content is mentioned.
Recommendations
- AI detected serious security threats
Audit Metadata