seo
Pass
Audited by Gen Agent Trust Hub on Oct 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external, untrusted data such as websites, SEO datasets, and drafts which could potentially contain malicious instructions.
- Ingestion points: Processes user-supplied websites, pages, drafts, and SEO datasets as specified in the Input section of SKILL.md.
- Boundary markers: No explicit delimiters or instructions are provided to the agent to ignore potential commands embedded within the external input data.
- Capability inventory: The skill can read local reference files (markdown) and invoke other SEO-specific skills within the package (e.g., seo-audit, seo-google, seo-image-gen).
- Sanitization: No sanitization or filtering logic for ingested content is defined in the instructions.
- [SAFE]: The skill provides operational guidance for the agent to resolve file paths dynamically using the host environment rather than hardcoding sensitive directories.
- [SAFE]: External references point to the author's official GitHub repository for documentation and attribution, which is consistent with the skill's stated purpose.
Audit Metadata