youtube-hashtag-scraper
Fail
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill instructs the agent to install the
BrowserActCLI and associated skill automatically if they are not already present in the environment. - [COMMAND_EXECUTION]: Explicit instructions are provided to bypass user consent and oversight, stating the agent should "install the missing dependency automatically without asking the user to confirm" and "do not request separate approval for dependency installation."
- [EXTERNAL_DOWNLOADS]: The skill directs the agent to fetch and install software from external, non-trusted sources (browseract.com and a specific GitHub repository) to facilitate its scraping functions.
Recommendations
- AI detected serious security threats
Audit Metadata