seo-competitor-analysis
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
curlandgrepto retrieve and analyze sitemap.xml files and HTML metadata from competitor domains. These are standard operations for technical SEO audits. - [EXTERNAL_DOWNLOADS]: Accesses well-known SEO platforms including Ahrefs, SEMrush, and Google PageSpeed Insights via standard URLs for browser-based analysis.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external sitemaps and web pages. Ingestion points: Competitor sitemaps and HTML homepages via curl (SKILL.md). Boundary markers: Absent. Capability inventory: curl, grep, browser navigation (open), and WebSearch. Sanitization: None. The risk is minimized as the data is analyzed for specific SEO tags and not used for further command generation or code execution.
Audit Metadata