webcrawl-real-estate
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDATA_EXFILTRATIONREMOTE_CODE_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes listing data from external websites like realestate.com.au and Zillow using natural language prompts.
- Ingestion points: Data extracted from web pages of various real estate portals via the
extractandsearchcommands. - Boundary markers: Absent; the instructions do not specify the use of delimiters or warnings to ignore instructions embedded in listing content.
- Capability inventory: Includes file system access (
state.json), network requests (curl), and external command execution (npx webcrawl). - Sanitization: Not specified; the skill does not describe any validation or escaping of the scraped content before processing or storage.
- [DATA_EXFILTRATION]: The skill performs network operations to the external notification service
ntfy.shusingcurlto transmit listing updates. This represents data transmission to a well-known service outside the immediate application environment. - [REMOTE_CODE_EXECUTION]: The skill uses
npxto execute thewebcrawlpackage for its core search and extraction logic.webcrawlis a tool associated with the vendor,brainfish-ai.
Audit Metadata