seo-cluster
Pass
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection as it is designed to ingest and process data from external, untrusted sources.
- Ingestion points: According to
SKILL.mdandreferences/serp-overlap-methodology.md, the skill fetches organic search results from WebSearch or the DataForSEO API and scrapes content from user-provided URLs. - Boundary markers: The instructions lack specific requirements for the agent to use delimiters or "ignore embedded instructions" protocols when handling the retrieved search engine results or page analysis data.
- Capability inventory: The skill has permissions to write files to the local directory (e.g.,
cluster-plan.json,cluster-map.html) and can trigger automated content creation by invoking theblog-writeskill as detailed inreferences/execution-workflow.md. - Sanitization: While the skill mentions SSRF protection via
validate_url()inscripts/fetch_page.py, there is no evidence of sanitization for the natural language content extracted from the web, which could contain instructions intended to influence the agent's behavior during the clustering or execution phases.
Audit Metadata