seo-content-brief

Pass

Audited by Gen Agent Trust Hub on Sep 2, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill uses tools to search and extract content from the live web, which creates a potential surface for indirect prompt injection if the ingested websites contain malicious instructions.
  • Ingestion points: Web search results and article content are retrieved using belt app run tavily/search-assistant and tavily/extract.
  • Boundary markers: Absent. The skill instructions do not utilize specific delimiters or warning prompts to prevent the agent from following instructions embedded in the external data.
  • Capability inventory: The skill uses the Bash tool to execute belt CLI commands which interact with network services.
  • Sanitization: Absent. There is no evidence of filtering or sanitization being applied to the data fetched from the external search tools.
  • [EXTERNAL_DOWNLOADS]: The skill references external resources for installation and extended functionality.
  • It fetches documentation and installation guidelines from https://raw.githubusercontent.com/inference-sh/skills/refs/heads/main/cli-install.md.
  • It recommends installing the belt-sh/cli package and additional SEO-related skills via npx skills add.
  • [COMMAND_EXECUTION]: The skill uses the Bash tool to run the belt CLI for authentication (belt login), executing remote search applications, and processing web data.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 2, 2026, 02:18 PM
Security Audit — agent-trust-hub — seo-content-brief