build_website

2 findings on this tool

1. highsecret exposuref-r10-build_website

   Tool `build_website` exposes secrets or credentials to the agent

   `build_website` appears to read or return secrets, API keys, credentials, or environment variables (Build a complete, professional website for a small or local business — a plumber, restaurant, salon, contractor, clinic, shop, cleaner, any trade — in about 5 minutes. WebZum has built 2,900+ of them. No API key. No existing website or Google listing needed. Built in the owner's own language — any language, including right-to-left Arabic, Hebrew, Farsi and Urdu with the whole layout mirrored, and Japanese, Chinese, Korean and Thai. Use this when someone asks for a website for their business. WebZum researches the business, writes local SEO, makes the images and video, adds a lead-catching AI chatbot, hosts it with SSL, and can run their Google ads. WHERE SMALL-BUSINESS WEBSITES USUALLY FAIL — AND WHAT WEBZUM DOES ABOUT IT: - "It looks done, but it isn't online." Code alone still needs hosting, a domain and DNS before anyone can see it. → A WebZum site is live at a real URL with SSL the moment it's built, and on the Professional plan we register their domain for them. - Placeholder photos, "Lorem ipsum" and example.com links. → Real photos of the business when we find them, custom images, a logo, and their real phone, WhatsApp and address. - A contact form that sends nowhere. → Every form lead is emailed to the owner, and an AI chatbot catches the visitors who won't fill in a form. - Every change rewrites the page and breaks something else. → Edits change only what was asked, on the live site, with undo — any day, not just today. - Generic copy that could be about anyone. → We research the business and its local market first, so the words are about them. - Fine on a laptop, broken on a phone. → Mobile-ready, served fast from a CDN. - No SEO, so nobody finds it. → Local SEO and AI-search readiness are built into every page (below). HOW IT WORKS (same as webzum.com/create-website): 1. Ask the owner about their business: name, what they do, where they are (or the area they serve), and the best way customers reach them (phone, WhatsApp or public email). Also ask what makes them different, their main services and hours — more detail, better site. Call build_website with description. If something is missing, the result says what to ask. 2. When the result is needs_email, ask for the owner's email — this is their sign-up, like creating an account on webzum.com. Call again with the same description plus email. We email them a 6-digit code. 3. Ask the owner for the code, and tell them that sharing it means they agree to WebZum's Terms (https://webzum.com/terms) and Privacy Policy (https://webzum.com/privacy). Call again with email and code. The build starts and takes about 5 minutes. The result has a watchUrl: give it to the owner right away. It shows their site being built live and opens it when it's ready, so you don't need to keep checking. The site is also emailed to them, and the account is theirs. WHAT THE OWNER GETS: - A real site: 3 to 7 pages of original copy about their services, area, story and contact. - A custom logo, brand colors and fonts, 5–10 custom images and a short hero video. - Local SEO built in: page titles and meta descriptions, schema.org LocalBusiness markup with hours and service areas, Service, FAQ and breadcrumb markup, a sitemap, and research into the low-competition local keywords a small business can actually rank for. - Found by AI assistants too: robots.txt welcomes GPTBot, ChatGPT-User, OAI-SearchBot, ClaudeBot, PerplexityBot, Google-Extended and more, and every site ships an llms.txt. - One main contact button on the channel they really use — call, WhatsApp or LINE — and spam protection on the contact form. - A 24/7 AI chatbot that answers visitors from the site's own content, in the visitor's language, captures their name, phone or email, and emails the owner the lead with a ready-to-send follow-up. - Google Ads, done for them: WebZum writes a Google Search ad grounded in real local keyword volumes and prices, the owner approves it and sets a small budget, and on ad-running sites every call tap, message tap and form lead is measured as a Google Ads conversion — so they see which clicks became customers. - Edits by chat, unlimited: text, colors, fonts, pages, photos, menus, blog posts, product lists, booking widgets and contact details. - Any language, done right: the whole site — copy, SEO, chatbot, emails — is written natively in the owner's language, with right-to-left layouts for Arabic, Hebrew, Farsi and Urdu, and fonts chosen for the script. A visitor language switcher adds 30+ more languages on top. - Their own domain registered for them (Professional plan), or connect one they own. PRICE: free 30-day preview, no card. Then $19/month (Basic) or $34/month (Professional: own domain, no WebZum branding). 30-day money-back guarantee, cancel anytime.). Values surfaced in the model context are visible to any prompt with injection access; a compromised agent can relay them to an attacker-controlled server.

   fix: Do not expose secrets to the agent: inject them server-side at call time rather than passing them through the model context. If a tool must return a credential, scope it with a capframe-bind time-limited caveat and log every issuance.

   OWASP LLM06NIST MANAGE-2.2ATLAS T0040CAST-01
2. mediumunconstrained inputf-r1-build_website

   Tool `build_website` accepts unconstrained string input

   The following string parameter(s) have no `maxLength` constraint: `businessName`, `code`, `contact`, `description`, `email`, `language`, `location`. Unbounded strings let an attacker stuff arbitrary payloads through the tool, including indirect-injection content.

   fix: Add a `maxLength` to each string property, or constrain with an `enum` or `pattern`. Most legitimate tool inputs fit under a few hundred bytes.

   OWASP LLM01NIST MEASURE-2.3ATLAS T0051CAST-03