zillow-scraper

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The skill includes an explicit proxy username/password field in its configuration and expects those credentials to be placed into the browser/proxy config, which would require the agent to accept and embed secret values verbatim into generated configs/commands (exfiltration risk).

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill explicitly instructs the agent to navigate to and scrape open/public Zillow pages (search result and homedetails URLs, including embedded NEXT_DATA JSON) and to parse listing and property content from those pages, thereby ingesting untrusted third-party user-generated content that directly influences scraping decisions and subsequent actions.