myworkdayjobs

Pass

Audited by Gen Agent Trust Hub on Oct 7, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references and retrieves configurations and OpenAPI definitions from the author's official domain at unbrowse.ai.
  • [REMOTE_CODE_EXECUTION]: The documentation includes instructions to install the skill using npx skills add from the vendor's website.
  • [COMMAND_EXECUTION]: Instructions guide the user to add a remote MCP server using the claude mcp add command-line tool.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests external content from myworkdayjobs.com to provide job search results, which constitutes a potential attack surface for indirect prompt injection.
  • Ingestion points: The dbs_wd3_myworkdayjobs_com__render_page and dbs_wd3_myworkdayjobs_com__read_page tools in SKILL.md ingest external web content.
  • Boundary markers: No specific delimiters or safety instructions are defined to separate external job data from the agent's instructions.
  • Capability inventory: The skill provides a set of tools under unbrowse.browse.* that allow the agent to open and perform actions on web pages.
  • Sanitization: The skill description does not specify any sanitization, filtering, or validation of the data retrieved from the target website.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 7, 2026, 04:13 AM