pp-zillow
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download and install the zillow-pp-cli tool using npx from the @mvanhorn/printing-press-library NPM package and go install from the vendor's GitHub repository.
- [COMMAND_EXECUTION]: The skill relies on the execution of a local binary to perform housing market analysis, resolve regional names, and generate client briefs. It also provides a structured SQL interface for querying local data.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes time-series datasets from Zillow Research. 1. Ingestion points: External Zillow Research CSV datasets synced via zillow-pp-cli sync or downloaded via zillow-pp-cli research. 2. Boundary markers: The CLI uses an --agent flag to produce structured JSON output, providing clear data boundaries for the agent. 3. Capability inventory: The skill uses the Bash tool to execute commands, performs network operations to sync data, and executes SQL queries. 4. Sanitization: The skill provides a read-only SQL gateway for local data analysis.
- [DATA_EXFILTRATION]: Includes a documented capability to deliver output to an external webhook URL via the --deliver flag.
Audit Metadata