israeli-property-appraisal
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a bundled Python script (
scripts/comparables.py) to perform data retrieval and statistical analysis. This is the primary function of the skill and is executed within the agent's environment to pull government transaction data. - [EXTERNAL_DOWNLOADS]: The skill connects to official Israeli government domains (
govmap.gov.ilandnadlan.gov.il) to fetch real estate transaction records. These are well-known public services, and the network access is consistent with the skill's stated purpose. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from external API responses (Ingestion Point: govmap.gov.il). It employs safe handling by using a Python script to parse only specific structured JSON fields (Sanitization) and includes instructions in Step 7 (Boundary Marker) to inform the user that the output is raw material for their own preparation rather than a binding professional appraisal. The skill utilizes script execution capabilities (Capability Inventory) to perform these tasks.
- [CREDENTIALS_UNSAFE]: A hardcoded API token is present in the Python script (
scripts/comparables.py). The token is identified as a public client constant used for accessing public government records and is not a private secret.
Audit Metadata