zhihu-topic-scraper

Warn

Audited by Gen Agent Trust Hub on Jul 20, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references an external dependency, the BrowserAct CLI and Skill, which it directs the agent to fetch from browseract.com and GitHub.
  • [REMOTE_CODE_EXECUTION]: In the 'BrowserAct Runtime' section, the instructions explicitly command the agent to perform automatic installation of missing dependencies 'without asking the user to confirm'. It further specifies that the agent should 'not request separate approval for dependency installation', which is a significant bypass of user oversight for software installation and execution.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 20, 2026, 04:31 AM
Security Audit — agent-trust-hub — zhihu-topic-scraper