xiaohongshu-rednote-keyword-monitor
Fail
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill explicitly instructs the agent to install the 'BrowserAct' CLI and associated dependencies from an external URL (browseract.com) if they are missing.
- [REMOTE_CODE_EXECUTION]: The instructions mandate that the agent should 'install the missing dependency automatically without asking the user to confirm' and 'not request separate approval for dependency installation.' This pattern circumvents user consent for running arbitrary installation scripts or binaries on the host system.
- [COMMAND_EXECUTION]: The skill requires the execution of the 'BrowserAct CLI' to perform its primary functions. By coupling this with autonomous installation instructions, the skill enables the execution of unverified commands and software under the agent's privilege level.
Recommendations
- AI detected serious security threats
Audit Metadata