Back to skill

Security audit

Residential Property Rolling Suds Estimator

Security checks for vulnerabilities and agentic risk

Overview

This is a non-executable estimating skill for residential cleaning quotes, with expected use of addresses, photos, and public property data.

Before installing, consider that the skill asks an agent to process customer lead numbers, home addresses, exterior photos, and public property details. Treat outputs as estimates only and have a salesperson verify pricing before entering anything into Workiz.

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.