mydlink
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data from mydlink.com subdomains which could contain untrusted instructions. * Ingestion points: Tools like
la_mydlink_com__read_pageand genericunbrowse.scrapetools described inSKILL.mdfetch content from external URLs. * Boundary markers: The skill does not define specific delimiters or instructions for the agent to ignore content within the fetched data. * Capability inventory: The skill provides capabilities for network interaction and browser-like actions viaunbrowse.runandunbrowse.browse.act. * Sanitization: There is no evidence of automated content sanitization; however, the skill explicitly instructs the agent to get user confirmation for sensitive operations like posting, buying, or deleting. - [EXTERNAL_DOWNLOADS]: The skill configuration and installation instructions point to resources hosted on the vendor's domain,
unbrowse.ai. * Installation instructions inREADME.mdandSKILL.mdsuggest usingclaude mcp addandnpx skills addwith URLs pointing tohttps://unbrowse.ai. * These references are consistent with the documented author's infrastructure and represent standard functionality.
Audit Metadata