seo-local
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: No direct prompt injection, role-play overrides, or safety filter bypass attempts were detected. The instructions focus entirely on the stated SEO analysis purpose.
- [DATA_EXPOSURE]: No hardcoded credentials, API keys, or sensitive file paths (e.g., .ssh, .env) were found in the skill content.
- [REMOTE_CODE_EXECUTION]: The skill does not contain any remote code execution patterns, such as piping network downloads to a shell or using dynamic execution functions like eval().
- [COMMAND_EXECUTION]: No dangerous system commands, privilege escalation (sudo), or persistence mechanisms were identified.
- [OBFUSCATION]: The skill uses clear, plain-text markdown. No hidden content, Base64 encoding, zero-width characters, or homoglyphs were detected.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external URLs provided by the user to perform SEO analysis.
- Ingestion points: External URLs provided as arguments.
- Boundary markers: None explicitly defined.
- Capability inventory: Pattern matching on page content and report generation; no dangerous tool execution based on external data.
- Sanitization: Not explicitly defined.
- Note: This is a standard attack surface for web-parsing skills; the risk is low as the capabilities are limited to analysis and reporting.
Audit Metadata