ahrefs-python
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads and installs the ahrefs-python library from the official vendor repository on GitHub.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources via the Ahrefs API, which could include content from processed websites.
- Ingestion points: Site Explorer and Keywords Explorer data retrieval methods in SKILL.md.
- Boundary markers: The instructions do not define specific delimiters to isolate external API data from the agent's core instructions.
- Capability inventory: The skill can perform state-changing operations via the Management API in SKILL.md, such as project or keyword deletion.
- Sanitization: The ahrefs-python SDK utilizes Pydantic typed models to validate and structure the responses received from the API.
Audit Metadata