seo-competitor-analysis
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The analysis framework involves fetching and auditing external competitor websites using WebFetch. This process introduces a surface for indirect prompt injection, where malicious instructions hidden in the HTML or content of a competitor's site could attempt to influence the agent's behavior during the analysis.
- Ingestion points: Data is ingested via WebFetch when analyzing competitor content and WebSearch during SERP analysis (SKILL.md).
- Boundary markers: The instructions do not define specific delimiters or instructions for the agent to ignore embedded commands within the fetched data.
- Capability inventory: The skill environment allows access to Bash, WebFetch, Read, Grep, and Glob (SKILL.md frontmatter).
- Sanitization: There are no explicit steps defined for sanitizing or filtering external content before it is processed by the agent.
Audit Metadata