myworkdayjobs
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and retrieves configurations and OpenAPI definitions from the author's official domain at
unbrowse.ai. - [REMOTE_CODE_EXECUTION]: The documentation includes instructions to install the skill using
npx skills addfrom the vendor's website. - [COMMAND_EXECUTION]: Instructions guide the user to add a remote MCP server using the
claude mcp addcommand-line tool. - [INDIRECT_PROMPT_INJECTION]: The skill ingests external content from
myworkdayjobs.comto provide job search results, which constitutes a potential attack surface for indirect prompt injection. - Ingestion points: The
dbs_wd3_myworkdayjobs_com__render_pageanddbs_wd3_myworkdayjobs_com__read_pagetools inSKILL.mdingest external web content. - Boundary markers: No specific delimiters or safety instructions are defined to separate external job data from the agent's instructions.
- Capability inventory: The skill provides a set of tools under
unbrowse.browse.*that allow the agent to open and perform actions on web pages. - Sanitization: The skill description does not specify any sanitization, filtering, or validation of the data retrieved from the target website.
Audit Metadata