扫描报告
5 /100
propertyguru-sg-sale-browser-crawl
Extract around 50 Singapore for-sale listings from a PropertyGuru search results URL using a real browser session after Cloudflare verification.
A straightforward browser-based web scraper for PropertyGuru Singapore with fully declared capabilities, no hidden functionality, and no credential access.
可以安装
No action needed. The skill is a legitimate, well-documented web scraping tool with no security concerns.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 文件系统 | READ | READ | ✓ 一致 | SKILL.md references reading local files: {baseDir}/references/source-notes.md |
| 浏览器 | READ | READ | ✓ 一致 | SKILL.md declares 'Use a real browser page' via playwright; browser access is th… |
| 网络访问 | READ | READ | ✓ 一致 | SKILL.md declares fetching PropertyGuru URLs only; no exfiltration endpoints |
| 命令执行 | NONE | NONE | — | No shell execution observed in any file |
| 环境变量 | NONE | NONE | — | No environment variable access observed |
| 剪贴板 | NONE | NONE | — | No clipboard operations observed |
| 数据库 | NONE | NONE | — | No database operations observed |
| 技能调用 | NONE | NONE | — | No cross-skill invocation observed |
2 项发现
中危 外部 URL 外部 URL
https://www.propertyguru.com.sg/property-for-sale?listingType=sale&page=1&isCommercial=false&maxPrice=1400000 SKILL.md:5 中危 外部 URL 外部 URL
https://www.propertyguru.com.sg/listing/hdb-for-sale-780b-woodlands-crescent-500044843 SKILL.md:81 目录结构
3 文件 · 8.0 KB · 250 行 Markdown 2f · 247L
YAML 1f · 3L
├─
▾
agents
│ └─
openai.yaml
YAML
├─
▾
references
│ └─
source-notes.md
Markdown
└─
SKILL.md
Markdown
安全亮点
✓ SKILL.md is thorough, well-structured, and fully declares the browser-based scraping approach
✓ All capabilities (browser, filesystem read, network read) are declared and consistent with the implementation intent
✓ No shell execution, subprocess, or command injection vectors present
✓ No credential or sensitive path access (no ~/.ssh, ~/.aws, .env, or os.environ iteration)
✓ No obfuscation techniques (no base64, eval, atob, or hidden code)
✓ No external data exfiltration endpoints or C2 communication
✓ No supply chain risks — no scripts, dependencies, or binary files
✓ Data stays local: only reads from PropertyGuru and writes structured listing data
✓ No persistence mechanisms (no cron, startup hooks, or backdoor installation)
✓ Deduplication by listing ID is a good data integrity practice