hometeamns-sg
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill fetches content from the hometeamns.sg website, which could contain instructions intended to manipulate the agent.
- Ingestion points: The tools
hometeamns_sg__read_pageandhometeamns_sg__get_search(SKILL.md) ingest external web content. - Boundary markers: No delimiters or warnings are used to separate external content from agent instructions.
- Capability inventory: The skill possesses the ability to execute high-level tasks via
unbrowse.runand perform automated browser actions, includingautofillfrom a password manager, viaunbrowse.browse.act(SKILL.md). - Sanitization: No evidence of sanitization or validation of the fetched web content was found.
- [EXTERNAL_DOWNLOADS]: The skill connects to a remote Model Context Protocol (MCP) server provided by the vendor.
- Evidence: The
server.jsonfile andSKILL.mdreference a remote connection tohttps://unbrowse.ai/mcp/hometeamns.sg.
Audit Metadata