junta-leiloeiros
Pass
Audited by Gen Agent Trust Hub on May 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/web_scraper_fallback.pyusessubprocess.runto execute a local script from a related skill when primary scraping fails. This is a functional requirement for the skill's integration architecture. - [EXTERNAL_DOWNLOADS]: The skill communicates with 27 Brazilian government portals to fetch public data as its primary function. It employs
httpxandPlaywrightto handle various site architectures. - [DATA_EXFILTRATION]: The skill performs mass collection of professional registry data (names, emails, phones) from public sources into a local SQLite database. This behavior is documented as the skill's primary objective and follows established legal guidelines for public data.
- [DYNAMIC_EXECUTION]: In
scripts/scraper/states.py, the skill dynamically generates class objects using thetype()function to manage state-specific scrapers. This is an implementation of a factory pattern for code reuse. - [PROMPT_INJECTION]: The skill serves as an indirect prompt injection surface by processing data from 27 external government websites.
- Ingestion points: scraping logic in
scripts/scraper/*.pytargeting official government URLs. - Boundary markers: absent; data is parsed and stored directly.
- Capability inventory: network operations, local file system writes (SQLite), and local subprocess execution.
- Sanitization: text normalization and whitespace cleaning are implemented, though no adversarial instruction filtering is present.
Audit Metadata