Rightmove Property Data API - UK Listings, England and Wales Sold Prices, Agents

• Outcome: Review
• Latest audit: Oct 11, 2026 · 2:29 AM UTC
• Version: 1.0.1

Overview

This skill is a disclosed Rightmove property-data API guide that sends user property queries to Scavio, with no hidden local execution or persistence found.

Install only if you are comfortable sending UK property searches, postcodes, addresses, listing URLs, and filters to Scavio's API and spending API credits per call. Keep SCAVIO_API_KEY in an environment variable or secret store, do not hardcode real keys in source files, and avoid submitting private property details unless the user has agreed to that external lookup.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (4)

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 91% confidence

Finding

The example curl command demonstrates sending search parameters and an authorization bearer token to an external endpoint, confirming third-party data transmission. Although this is normal API usage, it increases the risk of accidental disclosure of user search terms or secret leakage if users copy commands insecurely or hardcode credentials.

Content

Scanner excerpt · SKILL.md (reported line 171)May include surrounding context.

Examples

bash

curl -X POST https://api.scavio.dev/api/v1/rightmove/sold \
  -H "Authorization: Bearer $SCAVIO_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"location": "Bristol", "property_type": "terraced", "sold_within_years": 2}'

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 91% confidence

Finding

The example curl command demonstrates sending search parameters and an authorization bearer token to an external endpoint, confirming third-party data transmission. Although this is normal API usage, it increases the risk of accidental disclosure of user search terms or secret leakage if users copy commands insecurely or hardcode credentials.

Content

Scanner excerpt · SKILL.md (reported line 171)May include surrounding context.

Examples

bash

curl -X POST https://api.scavio.dev/api/v1/rightmove/sold \
  -H "Authorization: Bearer $SCAVIO_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"location": "Bristol", "property_type": "terraced", "sold_within_years": 2}'

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 92% confidence

Finding

This code performs an outbound POST request to an external API using user-provided request bodies, which results in transmission of user queries and potentially sensitive address or location data to a third party. The behavior is expected for the skill's purpose, but it is still a real data-exposure boundary that should be treated as a security-relevant risk.

Content

Scanner excerpt · SKILL.md (reported line 187)May include surrounding context.

md

HEADERS = {"Authorization": f"Bearer {API_KEY}"}

def rightmove(endpoint, body):
    r = requests.post(f"{BASE}/api/v1/rightmove/{endpoint}", headers=HEADERS, json=body)
    r.raise_for_status()
    return r.json()["data"]

Missing User Warnings

Low

• Category: Not specified by scanner
• Confidence: 90% confidence

Finding

The skill clearly instructs the agent to send user-supplied location and property search inputs to a third-party service, but it does not prominently warn users that their queries will be transmitted off-platform. While the transmitted data is typically low sensitivity, users may include precise addresses or other private housing-related details, creating a transparency and privacy risk.

Content

No source excerpt is available for this finding.

Static analysis

Detected: suspicious.exposed_secret_literal

File appears to expose a hardcoded API secret or token.

Critical

• Code: suspicious.exposed_secret_literal
• Location: SKILL.md:37