seo-page
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted content from user-provided URLs, creating a surface for indirect prompt injection attacks.
- Ingestion points: The agent parses web page content, including meta tags, title tags, headers (H1-H6), and schema markup (JSON-LD) retrieved from the user-provided URL in SKILL.md.
- Boundary markers: The instructions do not specify the use of delimiters or explicit warnings to ignore instructions that may be embedded within the analyzed page content.
- Capability inventory: The skill includes instructions to read from and write to the local filesystem within the
.seo-cache/directory (SKILL.md). - Sanitization: There is no evidence of sanitization or validation of the retrieved HTML content or meta information before it is processed by the agent.
Audit Metadata