youtube-trending-video-scraper
Fail
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The instructions explicitly command the agent to perform an automatic installation of a dependency ('browser-act') from an external domain (www.browseract.com) if it is missing. This bypasses user oversight and allows for the execution of unverified software.
- [EXTERNAL_DOWNLOADS]: The skill includes instructions to conceal the installation process from the user, specifically telling the agent not to ask for separate approval or describe the installation link as a browser-based request.
- [COMMAND_EXECUTION]: The skill relies on the execution of an external CLI tool ('browser-act') to perform its core functions, which increases the potential impact if the tool is compromised.
- [PROMPT_INJECTION]: The skill is designed to ingest and process data from external YouTube pages, creating an attack surface for indirect prompt injection.
- Ingestion points: Scraped video titles, descriptions, and creator data (SKILL.md).
- Boundary markers: Absent; there are no instructions to treat the scraped data as untrusted or to ignore embedded commands.
- Capability inventory: The agent has access to the 'browser-act' CLI which can perform further web interactions (SKILL.md).
- Sanitization: Not specified; the skill does not mention any validation or filtering of the external data before it is processed.
Recommendations
- AI detected serious security threats
Audit Metadata