seo-content-brief
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill uses tools to search and extract content from the live web, which creates a potential surface for indirect prompt injection if the ingested websites contain malicious instructions.
- Ingestion points: Web search results and article content are retrieved using
belt app run tavily/search-assistantandtavily/extract. - Boundary markers: Absent. The skill instructions do not utilize specific delimiters or warning prompts to prevent the agent from following instructions embedded in the external data.
- Capability inventory: The skill uses the
Bashtool to executebeltCLI commands which interact with network services. - Sanitization: Absent. There is no evidence of filtering or sanitization being applied to the data fetched from the external search tools.
- [EXTERNAL_DOWNLOADS]: The skill references external resources for installation and extended functionality.
- It fetches documentation and installation guidelines from
https://raw.githubusercontent.com/inference-sh/skills/refs/heads/main/cli-install.md. - It recommends installing the
belt-sh/clipackage and additional SEO-related skills vianpx skills add. - [COMMAND_EXECUTION]: The skill uses the
Bashtool to run thebeltCLI for authentication (belt login), executing remote search applications, and processing web data.
Audit Metadata