skills/unbrowse-ai/sites/v2ex/Gen Agent Trust Hub

v2ex

Pass

Audited by Gen Agent Trust Hub on Sep 28, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes content from v2ex.com, which serves as an ingestion point for untrusted external data.
  • Ingestion points: Tools v2ex_com__render_page and v2ex_com__read_page retrieve search results and page text from v2ex.com (SKILL.md).
  • Boundary markers: There are no explicit markers or instructions to isolate the external content from the agent's core instructions.
  • Capability inventory: The skill has access to network-based tools via an MCP server and capabilities for page rendering and scraping (SKILL.md, server.json).
  • Sanitization: No sanitization or filtering of the fetched external data is specified in the skill's instructions.
  • [EXTERNAL_DOWNLOADS]: The skill relies on external network resources for its core functionality and installation.
  • Fetches tool definitions and execution environment from the vendor's MCP server at https://unbrowse.ai/mcp/v2ex.com (README.md, SKILL.md).
  • Provides installation instructions targeting the vendor's domain via npx (README.md).
  • These external references are provided by the vendor to support the skill's primary function.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 28, 2026, 10:56 AM