real-estate-search
Pass
Audited by Gen Agent Trust Hub on Apr 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses an external API proxy at
k-skill-proxy.nomadamas.orgto fetch real estate information. - [DATA_EXFILTRATION]: Network requests are sent to
k-skill-proxy.nomadamas.org. In the documented examples, these requests are used to transmit search parameters such as region codes and dates to retrieve transaction data. - [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it processes and presents data from an external, third-party API.
- Ingestion points: Data is ingested via API responses from
https://k-skill-proxy.nomadamas.org/v1/real-estate/(SKILL.md). - Boundary markers: The instructions do not specify any delimiters or safety warnings to the agent for handling potentially instructions embedded in the external data.
- Capability inventory: The skill utilizes network capabilities to fetch and process external content.
- Sanitization: No validation or escaping mechanism is defined for the content returned from the external API before it is integrated into the agent's context.
Audit Metadata