redfin-api
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of documentation and usage instructions for the Redfin unofficial API. It describes endpoints, parameters, and response structures intended for property search and data retrieval.
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to make GET requests to
redfin.com. This is a well-known real estate service and the behavior is directly aligned with the skill's primary purpose. - [DATA_EXFILTRATION]: While the skill mentions the use of authentication cookies (e.g.,
RF_AUTH,RF_SECURE_AUTH), it does not hardcode any credentials or provide instructions to exfiltrate sensitive local configuration files or user environment data. - [INDIRECT_PROMPT_INJECTION]: The skill describes parsing data from an external source (Redfin API responses). Although this creates an ingestion surface for untrusted data, the skill provides specific instructions for parsing structured JSON and CSV, which minimizes the risk of the agent misinterpreting data as commands.
Audit Metadata