real-estate-pro
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process user-provided property details to generate formatted listing copies and scripts. While this constitutes an attack surface for indirect prompt injection, the risk is negligible as the skill lacks any dangerous capabilities such as network access or command execution.
- Ingestion points: User-supplied property descriptions and arguments passed to the
/real-estate-procommand inSKILL.md. - Boundary markers: The skill relies on structured Markdown templates (
templates/output-template.md) to organize data, although it lacks explicit instructions for the AI to ignore embedded commands within user input. - Capability inventory: Analysis of all files reveals no subprocess calls, network operations, or file system writes beyond the instruction for the AI to provide output in a specific file format.
- Sanitization: No input validation or sanitization is performed on user-provided text.
- [NO_CODE]: The skill is composed exclusively of documentation and prompt templates. It does not include any scripts (Python, JavaScript, Shell), binaries, or configuration files that would initiate code execution or package installation.
Audit Metadata