floorplan-finder
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from third-party real estate portals, constituting an attack surface for indirect prompt injection. Ingestion points: Web pages, listings, and video transcripts (ASR) as described in references/search-routes.md. Boundary markers: The skill uses a structured 'working record' to isolate user constraints from external claims. Capability inventory: Limited to host-authorized browser, search, and image tools; tool installation is forbidden. Sanitization: The instructions mandate visual verification of drawings over text-based descriptions or OCR.
- [SAFE]: The skill includes explicit security directives to exclude sensitive data such as passwords and one-time codes from records, and it forbids bypassing security controls like CAPTCHAs or unauthorized tool execution.
Audit Metadata