seo-audit
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection due to its core functionality of fetching and processing external data.
- Ingestion points: The orchestrator mode uses
scripts/fetch_page.pyand potentiallyweb_fetchto crawl up to 500 pages of any user-provided URL. - Boundary markers: There are no defined boundary markers or instructions to the agent to ignore instructions embedded within the fetched HTML or content.
- Capability inventory: The skill possesses the ability to execute shell commands via Python scripts and spawn multiple specialized subagents based on the audit findings.
- Sanitization: No evidence of sanitization or filtering of external content is provided in the skill instructions.
- [COMMAND_EXECUTION]: The skill explicitly instructs the agent to execute several bundled Python scripts to perform technical tasks.
- Evidence: Instructions include running
python scripts/fetch_page.py,python scripts/google_auth.py --check,python scripts/drift_history.py <url>, andpython scripts/google_report.py --type full. - [EXTERNAL_DOWNLOADS]: The skill interacts with various external APIs and services to aggregate SEO data.
- Evidence: References to DataForSEO MCP, Moz/Bing APIs, Common Crawl, and Google APIs (CrUX, GSC, GA4) for data retrieval.
Audit Metadata