MENA Property Listing Generator

• Outcome: Review
• Latest audit: Jul 2, 2026 · 7:57 PM UTC
• Version: 1.0.1

Overview

The skill mostly does what it claims, but it can send listing data and an API key to LLM hosts beyond the declared Minimax endpoint.

Review this before installing if you handle private client or agent data. The skill stores listing and contact details locally and may send property details to an LLM when MINIMAX_API_KEY is set. Treat it as requiring Review until the publisher either removes the undocumented LLM_BASE_URL override or clearly declares every allowed destination and credential behavior.

SkillSpector

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Rogue Agent: Self-Modification, Session Persistence
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (4)

Vague Triggers

Medium

• Confidence: 89% confidence
• Finding: The skill advertises broad activation phrases such as 'create property listing' and 'real estate listing', which are common intents that could cause the agent to invoke this skill in situations the user did not explicitly request. Because the skill has network access and persistent local storage, overbroad activation increases the chance of unintentionally sending property and agent data to an external API and writing it to disk.

Vague Triggers

Medium

• Confidence: 84% confidence
• Finding: The 'When to use this skill' section includes vague conditions like reducing manual copywriting time, which do not clearly bound the operational scope. Ambiguous routing criteria can cause the skill to activate for loosely related writing tasks, leading to unnecessary disclosure of user-supplied details to the external LLM and creation of persistent records.

Missing User Warnings

Medium

• Confidence: 94% confidence
• Finding: When an API key is present, the code sends listing details and agent information to an external LLM service without explicit consent, disclosure, or redaction. This can expose phone numbers, agent names, and potentially sensitive business data to a third party, which is especially relevant in a CLI tool that otherwise appears local-first.

Session Persistence

Medium

• Category: Rogue Agent

Content

name: mena-property-listing-generator
version: 1.0.1
author: "NASSER AL-SOLAITTI"
description: "AI-powered bilingual property listing generator for MENA real estate agents. Input: basic property specs. Output: SEO-optimized Arabic + English listing text, Instagram caption, TikTok script, Facebook post, and WhatsApp follow-up scripts. Use when user says 'create property listing', 'real estate listing', 'listing in Arabic', 'PropertyFinder listing', or wants to reduce manual copywriting time.
permissions:
  - network: send listing text and agent details to minimax LLM API (api.minimax.chat) only
  - filesystem-write: write generated listings to ~/.openclaw/mena-property-listing-generator/

• Confidence: 92% confidence
• Finding: The skill explicitly stores listing JSON files, agent profiles, and monthly counters under ~/.openclaw/mena-property-listing-generator/, creating persistent retention of contact details and property data across sessions. Even if intended for convenience, session persistence increases privacy and data exposure risk if the host is shared, compromised, or if old records are reused without the user's awareness.

Static analysis

No suspicious patterns detected.