seo-content-brief
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the user to perform its primary function, creating an attack surface where malicious instructions could be embedded in the input.
- Ingestion points: The skill accepts a topic or query and intended site/audience as described in the 'Input' section of
SKILL.md. - Boundary markers: The instructions lack explicit boundary markers or delimiters to separate user data from the agent's instructions, and do not include warnings to ignore instructions embedded within the provided topics.
- Capability inventory: The skill's primary capabilities involve reading local reference files and generating text outlines. While the 'Evidence and runtime' section mentions an 'execution tool', no high-risk tools (e.g., arbitrary shell execution or external data exfiltration) are requested in the skill's configuration.
- Sanitization: No input sanitization or validation mechanisms are described for the incoming topic or query data.
- [EXTERNAL_DOWNLOADS]: The skill provides a link to its source code on GitHub for attribution. This resource belongs to the skill's author and is a standard reference link.
Audit Metadata