seo-hreflang
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized activities were detected within the skill's instructions or reference files. All functionality aligns with the stated purpose of international SEO auditing. All external references are examples or relate to the author's own vendor tools.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to audit external URLs and local content directories, which are untrusted data sources. While this ingestion represents a potential surface for indirect prompt injection, it is the primary and intended purpose of the SEO audit functionality.
- Ingestion points: The
/seo hreflang audit <directory-or-url>command ingests data from external sources specified by the user (SKILL.md). - Boundary markers: The instructions do not define specific delimiters for separating user-provided content from agent instructions during the audit process.
- Capability inventory: The skill interacts with the local file system by reading from and writing JSON data to the
.seo-cache/directory to maintain session context. - Sanitization: No explicit sanitization or filtering of external content is specified in the audit workflow.
Audit Metadata