seo-keyword-research
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface for indirect prompt injection because it instructs the agent to ingest and process data from untrusted external sources.
- Ingestion points: The skill performs 'Forum mining' (Reddit, Quora) in Step 1, extracts 'People Also Ask' (PAA) from search results, and analyzes competitor domains and SERP content in Steps 4 and 5 using the
WebFetchtool. - Boundary markers: The instructions do not define clear delimiters or warnings to treat external content as untrusted data, increasing the risk of the agent accidentally executing instructions embedded in that content.
- Capability inventory: The skill is allowed to use
BashandWebFetchtools. A successful injection from a malicious website or forum post could theoretically influence the agent to perform unauthorized commands or exfiltrate processed data. - Sanitization: There are no instructions for sanitizing or filtering the fetched content before it is processed by the LLM.
Audit Metadata