property-listings

Pass

Audited by Gen Agent Trust Hub on Nov 8, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external, untrusted websites using web scraping and search capabilities. * Ingestion points: External data enters the agent context via the firecrawl_search and firecrawl_scrape tools as described in SKILL.md. * Boundary markers: The skill includes an explicit instruction to treat all retrieved material as evidence and not as instructions, which acts as a boundary against potential malicious content in the scraped data. * Capability inventory: The skill utilizes network-interaction and data-retrieval capabilities via the Firecrawl MCP tools. * Sanitization: There are instructions to verify unit details, recheck filtered results, and label unverified data or items that miss requirements.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 8, 2026, 10:22 AM