real-estate-investor-pitch-specialist
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of a highly detailed set of instructions for an AI agent to act as a financial specialist in the UAE real estate market. It provides structural templates and logic for investment analysis without including any executable code, network requests, or sensitive file access.
- [COMMAND_EXECUTION]: The
scripts/run.shfile is a standard utility script used to invoke a local Python-based skill runner. It does not perform any unauthorized command execution or privilege escalation. - [DATA_EXPOSURE]: No hardcoded credentials, API keys, or access to sensitive local environment variables were found. The skill operates purely on professional real estate data templates.
- [PROMPT_INJECTION]: The instructions do not contain any patterns attempting to bypass safety filters or override system constraints. While it includes instructional markers like 'Critical Rules', these are used for defining agent behavior within the intended domain of real estate pitching.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external data such as investor profiles and property shortlists. While this represents a theoretical injection surface (Category 8), the skill lacks exploitable capabilities (such as network access or shell execution) that could be leveraged by a malicious input, rendering the risk negligible in this context.
Audit Metadata