seo-dataforseo
Pass
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a legitimate extension for SEO data gathering. It uses a structured approach to interact with the DataForSEO MCP server.
- [COMMAND_EXECUTION]: The skill utilizes local scripts (
scripts/dataforseo_costs.py) for cost estimation and logging. It also references a local installation script (./extensions/dataforseo/install.sh). These operations are restricted to the local environment and the skill's own logic. - [DATA_EXFILTRATION]: No unauthorized data exfiltration patterns were identified. The skill correctly instructs the user to provide credentials via the MCP configuration rather than hardcoding them.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data from search engines and AI scrapers (
ai_optimization_chat_gpt_scraper). While this presents a surface for indirect prompt injection, the skill does not execute this untrusted data in sensitive sinks, maintaining a low risk profile. - [PROMPT_INJECTION]: The instructions use standard instructional markers and do not attempt to bypass agent safety protocols or override system instructions.
Audit Metadata