scout.realestate

This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.

The tool POSTs seller-signal leads (which include owner contact info and property details) to any HTTPS URL supplied by the caller, with no mention of destination validation, allow-listing, or ownership verification. If an agent is tricked into subscribing with an attacker-controlled webhook_url, sensitive personal data of third-party homeowners (probate, foreclosure, tax-delinquent situations) would be exfiltrated on an ongoing basis.

Returns 'scored, deduplicated leads with property address + executor contact' sourced from probate filings, notices of default, lis pendens, and tax-delinquency records. This is personal data about vulnerable individuals (recently bereaved, financially distressed) who never consented to being profiled or contacted through this channel. Not a prompt-injection risk, but a privacy/ethical exposure worth flagging given the ease with which an agent could pull and act on this data at scale.

Same category of concern as scout.get_seller_signals — previews and (via scout.purchase_lead) full sale of contact/property details tied to probate, pre-foreclosure (NOD), tax-delinquent, and FSBO situations. Reasonable as an industry practice, but the tool description gives the agent no guidance about responsible use, consent, or applicable do-not-contact regulations (e.g., timing restrictions around probate/foreclosure outreach in some states).

Core function of the tool, but worth noting explicitly: calling this tool sends a user's personal contact information off-platform to Flika/partner brokerages under a revenue-share arrangement (30%/25% referral fee). Agents should ensure the end user has actually consented to being referred before this tool is invoked, since the description does not prompt for or require confirmation of client consent.

The state enum description contains a TODO referencing an internal file path ('scripts/scout/state-rec/run.ts ADAPTERS') — minor information disclosure about backend code structure exposed to any AI/agent reading the tool schema. Not exploitable on its own but unnecessary internal detail in a public-facing tool description.