legal-iros-registry-automation
Fail
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads code from
https://github.com/challengekim/iros-registry-automation.git. This repository is not maintained by a recognized trusted organization. - [REMOTE_CODE_EXECUTION]: The instructions guide the agent to execute Python scripts (
iros_cart.py,iros_download.py,iros_wizard.py) that are cloned from an external repository at runtime. - [COMMAND_EXECUTION]: The skill uses shell commands to install dependencies (
pip install,playwright install) and run the downloaded scripts. - [PROMPT_INJECTION]: The skill processes external data (corporate registration numbers and real estate lists) to drive automation. Malicious data could potentially influence the behavior of the Playwright automation scripts.
- Ingestion points:
$workdir/corp-input.json,$workdir/realty_listin SKILL.md. - Boundary markers: Absent.
- Capability inventory: Shell script execution, Python script execution, and Playwright browser control across all
iros_*.pyscripts. - Sanitization: Not specified in instructions; relies on external script integrity.
Recommendations
- AI detected serious security threats
Audit Metadata