seo-cluster
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes internal Python scripts (scripts/fetch_page.py and scripts/dataforseo_costs.py) to manage keyword expansion, SERP data retrieval, and API cost validation.
- [DATA_EXFILTRATION]: Facilitates data transfer to external services (WebSearch and DataForSEO API) to retrieve organic search results for analysis, which is the core functionality of the skill.
- [EXTERNAL_DOWNLOADS]: References an external repository (github.com/AgriciDaniel/claude-blog) as a prerequisite for automated content creation, though it does not perform automated installation.
- [PROMPT_INJECTION]: The skill processes untrusted search result data and user-provided strategy files (Ingestion: SKILL.md). It lacks explicit instructions to ignore embedded instructions in this data. Capabilities include influencing the blog-write skill and modifying local content files (Capability: execution-workflow.md). Basic input sanitization is implemented via validate_url() (Sanitization: SKILL.md).
Audit Metadata