seo-technical
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill references the execution of local Python scripts (
scripts/pagespeed_check.py,scripts/crux_history.py,scripts/gsc_inspect.py) to interface with Google APIs. These are internal tools used for gathering SEO metrics and do not involve arbitrary command injection or unsafe execution of untrusted code. - [EXTERNAL_DOWNLOADS]: The skill documents the use of external APIs such as DataForSEO and Google PageSpeed Insights. These are well-known, trusted industry services for SEO professionals. No suspicious remote downloads or 'curl | bash' patterns were identified.
- [INDIRECT_PROMPT_INJECTION]: The skill processes website data (robots.txt, HTML tags, meta descriptions). While this is an ingestion of untrusted external data, the instructions are focused on analysis rather than execution. The risk of the agent following instructions found within a target website's meta tags is inherent to SEO tasks but mitigated by the specific analytical scope of the skill. Severity: LOW.
Audit Metadata