v2ex
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes content from v2ex.com, which serves as an ingestion point for untrusted external data.
- Ingestion points: Tools
v2ex_com__render_pageandv2ex_com__read_pageretrieve search results and page text from v2ex.com (SKILL.md). - Boundary markers: There are no explicit markers or instructions to isolate the external content from the agent's core instructions.
- Capability inventory: The skill has access to network-based tools via an MCP server and capabilities for page rendering and scraping (SKILL.md, server.json).
- Sanitization: No sanitization or filtering of the fetched external data is specified in the skill's instructions.
- [EXTERNAL_DOWNLOADS]: The skill relies on external network resources for its core functionality and installation.
- Fetches tool definitions and execution environment from the vendor's MCP server at
https://unbrowse.ai/mcp/v2ex.com(README.md, SKILL.md). - Provides installation instructions targeting the vendor's domain via
npx(README.md). - These external references are provided by the vendor to support the skill's primary function.
Audit Metadata