dataforseo
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill communicates with the well-known service 'api.dataforseo.com' to retrieve keyword data, which is its primary intended purpose.
- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill explicitly advises against hardcoding credentials, directing users to provide API keys via environment variables. The Python script handles these secrets locally to construct authentication headers and does not transmit them to any unauthorized third-party servers.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data from a third-party API and presents it to the agent. While this creates an attack surface for indirect prompt injection from search data, the skill does not perform any sensitive operations (like file writes or command execution) based on this data, mitigating the risk.
Audit Metadata