unbroker

Pass

Audited by Gen Agent Trust Hub on Oct 7, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPERSISTENCEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches data broker definitions and registry information from public repositories on GitHub and the California Privacy Protection Agency (CPPA) official website to maintain an up-to-date broker database.
  • [COMMAND_EXECUTION]: Employs the Python subprocess module to manage local system utilities, including the age binary for dossier encryption and the launch of a Chromium-based browser for remote debugging (CDP). Argument construction uses sanitized paths and a whitelist of known browser binary names.
  • [PERSISTENCE]: Configures recurring tasks via the cronjob tool to monitor for the reappearance of personal data on broker sites, ensuring removals are maintained over time.
  • [INDIRECT_PROMPT_INJECTION]: Ingests content from external broker listings and email verification messages. Risk is mitigated by an anti-phishing scoring system that validates link domains and by using a safe string formatting wrapper to prevent injection into prompt templates.
  • [DATA_EXPOSURE]: Implements high-standard privacy controls, including mandatory consent gates, 0600 file permissions, and a 'NEVER_VOLUNTEER' policy that prevents sensitive identifiers like Social Security Numbers from being included in opt-out requests.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 7, 2026, 12:39 PM