gameinstaller-ru
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from gameinstaller.ru through search and read tools. Because it also includes capabilities to perform tasks (unbrowse.run) and automate browser actions (unbrowse.browse.act), it is vulnerable to indirect prompt injection if the site content contains malicious instructions.
- Ingestion points: gameinstaller_ru__read_page, gameinstaller_ru__get_root, and gameinstaller_ru__get_usearch_php ingest data from an external website.
- Capability inventory: Tools like unbrowse.run and unbrowse.browse.act allow the agent to execute actions based on processed information.
- Boundary markers: No specific delimiters or instructions to ignore embedded commands are defined for the ingested site content.
- Sanitization: The skill does not describe specific sanitization or filtering of the content retrieved from gameinstaller.ru.
- [EXTERNAL_DOWNLOADS]: The skill configuration and installation instructions reference external resources from the vendor's domain (unbrowse.ai).
- Evidence: npx skills add https://unbrowse.ai --skill gameinstaller-ru and https://unbrowse.ai/mcp/gameinstaller.ru.
Audit Metadata