seo-ecommerce
Pass
Audited by Gen Agent Trust Hub on Oct 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to audit external product and category pages, which constitutes an untrusted data ingestion surface.
- Ingestion points: The skill processes product/category pages, catalog data, and crawl results as specified in
SKILL.md(Workflow section). - Boundary markers: The instructions do not specify explicit delimiters or boundary markers to separate untrusted web content from agent instructions.
- Capability inventory: The skill instructions in
SKILL.md(Evidence and runtime section) mention the use of file readers and execution tools for supporting files. - Sanitization: There is no mention of sanitization, filtering, or validation of the external content before it is processed by the agent.
Audit Metadata