realestate-screen
Pass
Audited by Gen Agent Trust Hub on Jun 25, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection as it processes untrusted data from external websites.
- Ingestion points: The agent ingests data from external sources via multiple
WebSearchoperations (e.g., searching for market data, rental statistics, and property listings). - Boundary markers: The instructions do not define specific delimiters or instructions to ignore embedded commands within the searched content.
- Capability inventory: The agent's capabilities are limited to performing web searches and writing results to local markdown files (
PROPERTY-SCREEN-[CRITERIA].md). It does not have access to sensitive system files or arbitrary code execution. - Sanitization: No explicit sanitization or validation of the web search content is performed before processing.
Audit Metadata