kw-lookup

Pass

Audited by Gen Agent Trust Hub on Jun 19, 2026

Risk Level: SAFE
Full Analysis
  • [DATA_EXPOSURE]: The skill accesses public government data including property details and ownership information. It includes explicit privacy instructions to mask sensitive personal data (PESEL numbers) if stored in files and limits the use of such data to the immediate conversation context.
  • [EXTERNAL_DOWNLOADS]: The skill uses curl to fetch property geometry data from a well-known Polish government service (GUGiK/ULDK). These requests are directed to official public APIs (uldk.gugik.gov.pl).
  • [COMMAND_EXECUTION]: The skill utilizes browser automation (Playwright) via MCP to navigate the official government portal (ekw.ms.gov.pl). The instructions mandate manual CAPTCHA solving by the user, ensuring the agent does not attempt to bypass security measures autonomously.
  • [PROMPT_INJECTION]: No malicious injection patterns or overrides were detected. The instructions focus on structured data extraction and validation (regex for KW numbers).
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 19, 2026, 03:50 PM
Security Audit — agent-trust-hub — kw-lookup