seo-content
Pass
Audited by Gen Agent Trust Hub on Oct 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to analyze user-provided content such as drafts or web pages. This creates a surface for indirect prompt injection if the ingested data contains instructions designed to subvert the agent's logic.\n
- Ingestion points: The 'actual content' defined in the Input section of SKILL.md.\n
- Boundary markers: The instructions do not specify the use of delimiters or 'ignore embedded instructions' warnings for the analyzed data.\n
- Capability inventory: The skill refers to using 'execution tools' for path resolution in SKILL.md, but does not define high-risk operations or command injection vectors.\n
- Sanitization: No specific input validation or sanitization steps are described for the external content.
Audit Metadata