mobilefuse
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references a remote MCP server and REST API hosted at unbrowse.ai, which is the official infrastructure of the skill author, unbrowse-ai.\n- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external web pages (mobilefuse.com), creating a surface for indirect prompt injection if the source content contains malicious instructions.\n
- Ingestion points: Tools
mobilefuse_com__render_pageandmobilefuse_com__read_pageinSKILL.mdfetch content from external URLs.\n - Boundary markers: The instructions do not specify delimiters or explicit instructions for the agent to ignore embedded commands in the fetched content.\n
- Capability inventory: The skill provides network-based reading and searching tools; no local file writing or command execution capabilities are defined within the skill's instructions.\n
- Sanitization: No sanitization, filtering, or validation of the fetched external data is described.
Audit Metadata