seo-bing
Pass
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
python3to execute local scripts (scripts/bing_webmaster.py,scripts/indexnow_submit.py) which is the intended method for providing its SEO functionality. - [DATA_EXPOSURE]: The skill documentation describes storing API keys in
~/.claude/settings.json. This is an established pattern for local environment configuration and does not represent an attempt to exfiltrate or unsafely expose credentials. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data through URL parameters and batch files, which is a potential surface for indirect prompt injection. 1. Ingestion points: Command arguments
<url>and<file>inSKILL.md. 2. Boundary markers: Absent; no delimiters are defined to isolate processed data. 3. Capability inventory: Execution of local Python scripts through the shell. 4. Sanitization: None specified in the instructions for URL or file ingestion.
Audit Metadata