unbroker
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPERSISTENCEINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches data broker definitions and registry information from public repositories on GitHub and the California Privacy Protection Agency (CPPA) official website to maintain an up-to-date broker database.
- [COMMAND_EXECUTION]: Employs the Python
subprocessmodule to manage local system utilities, including theagebinary for dossier encryption and the launch of a Chromium-based browser for remote debugging (CDP). Argument construction uses sanitized paths and a whitelist of known browser binary names. - [PERSISTENCE]: Configures recurring tasks via the
cronjobtool to monitor for the reappearance of personal data on broker sites, ensuring removals are maintained over time. - [INDIRECT_PROMPT_INJECTION]: Ingests content from external broker listings and email verification messages. Risk is mitigated by an anti-phishing scoring system that validates link domains and by using a safe string formatting wrapper to prevent injection into prompt templates.
- [DATA_EXPOSURE]: Implements high-standard privacy controls, including mandatory consent gates, 0600 file permissions, and a 'NEVER_VOLUNTEER' policy that prevents sensitive identifiers like Social Security Numbers from being included in opt-out requests.
Audit Metadata