realestate-market

Pass

Audited by Gen Agent Trust Hub on Jun 25, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill retrieves information from external real estate platforms and public databases using search and fetch tools.\n- [PROMPT_INJECTION]: The skill possesses an indirect prompt injection attack surface because it processes untrusted data from external websites.\n
  • Ingestion points: Market data, trends, and economic statistics fetched via WebSearch and WebFetch from various online sources, as well as DISCOVERY_BRIEF data from orchestrators.\n
  • Boundary markers: Absent. The skill does not use specific delimiters or instructions to ignore potential commands within the fetched external data.\n
  • Capability inventory: The skill writes generated reports to the local file system.\n
  • Sanitization: The skill includes filename sanitization for the output reports but lacks explicit sanitization or filtering for the external content processed in the report body.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 25, 2026, 08:57 AM
Security Audit — agent-trust-hub — realestate-market