floorplan-finder

Pass

Audited by Gen Agent Trust Hub on Oct 23, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from third-party real estate portals, constituting an attack surface for indirect prompt injection. Ingestion points: Web pages, listings, and video transcripts (ASR) as described in references/search-routes.md. Boundary markers: The skill uses a structured 'working record' to isolate user constraints from external claims. Capability inventory: Limited to host-authorized browser, search, and image tools; tool installation is forbidden. Sanitization: The instructions mandate visual verification of drawings over text-based descriptions or OCR.
  • [SAFE]: The skill includes explicit security directives to exclude sensitive data such as passwords and one-time codes from records, and it forbids bypassing security controls like CAPTCHAs or unauthorized tool execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 23, 2026, 05:00 PM