seo-programmatic

Pass

Audited by Gen Agent Trust Hub on Oct 28, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill describes procedures for analyzing data from external sources including CSV/JSON files, API endpoints, and database queries. This creates a surface for indirect prompt injection where malicious instructions could be embedded in the data records. * Ingestion points: 'Data Source Assessment' section in SKILL.md. * Boundary markers: No delimiters or protective instructions are defined to separate data from commands. * Capability inventory: The skill does not request or define any executable capabilities, network tools, or file-system writing tools. * Sanitization: No input sanitization or validation logic is provided to filter potential injection strings from the data sources.
  • [SAFE]: The skill contains no executable scripts, binaries, or remote dependencies. The instructions are purely advisory and focused on SEO best practices.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 28, 2026, 05:32 PM