junta-leiloeiros

Pass

Audited by Gen Agent Trust Hub on May 12, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/web_scraper_fallback.py uses subprocess.run to execute a local script from a related skill when primary scraping fails. This is a functional requirement for the skill's integration architecture.
  • [EXTERNAL_DOWNLOADS]: The skill communicates with 27 Brazilian government portals to fetch public data as its primary function. It employs httpx and Playwright to handle various site architectures.
  • [DATA_EXFILTRATION]: The skill performs mass collection of professional registry data (names, emails, phones) from public sources into a local SQLite database. This behavior is documented as the skill's primary objective and follows established legal guidelines for public data.
  • [DYNAMIC_EXECUTION]: In scripts/scraper/states.py, the skill dynamically generates class objects using the type() function to manage state-specific scrapers. This is an implementation of a factory pattern for code reuse.
  • [PROMPT_INJECTION]: The skill serves as an indirect prompt injection surface by processing data from 27 external government websites.
  • Ingestion points: scraping logic in scripts/scraper/*.py targeting official government URLs.
  • Boundary markers: absent; data is parsed and stored directly.
  • Capability inventory: network operations, local file system writes (SQLite), and local subprocess execution.
  • Sanitization: text normalization and whitespace cleaning are implemented, though no adversarial instruction filtering is present.
Audit Metadata
Risk Level
SAFE
Analyzed
May 12, 2026, 01:12 PM