epfl-ch
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process content from an external website (epfl.ch), which represents a surface for indirect prompt injection attacks.
- Ingestion points: The
epfl_ch__render_pageandepfl_ch__read_pagetools described inSKILL.mdretrieve content from external web pages. - Boundary markers: The skill does not explicitly define delimiters or instructions to ignore embedded commands within the retrieved text.
- Capability inventory: The skill has the capability to perform network requests to the vendor's API to fetch site data.
- Sanitization: The Unbrowse service processes the raw site data into "readable text and links" before returning it to the agent.
- [EXTERNAL_DOWNLOADS]: The skill configuration and instructions reference resources hosted on the vendor's domain.
- Evidence: The MCP server endpoint is located at
https://unbrowse.ai/mcp/epfl.chas seen inREADME.mdandserver.json. - Evidence: Installation instructions in
README.mdusenpx skills addpointing to the vendor's website. - Context: All external references are restricted to the official infrastructure of the skill author (unbrowse-ai).
Audit Metadata