The Agent Skills Directory

[SAFE]: The skill provides structured guidelines and a utility script for programmatic SEO tasks without any detected malicious patterns or behaviors.
[COMMAND_EXECUTION]: The skill includes a local Python script scripts/url_pattern_generator.py. Analysis of the source code confirms it uses only standard Python libraries (json, sys, os, itertools) to perform string manipulation and combinations. It does not perform network operations, access sensitive system files, or attempt to escalate privileges.
[INDIRECT_PROMPT_INJECTION]: The skill instructions and script ingest external data from files like .claude/product-marketing-context.md and pattern.json.
Ingestion points: Instructions in SKILL.md to read marketing context; scripts/url_pattern_generator.py reads JSON configuration files.
Boundary markers: None explicitly defined for the ingested data.
Capability inventory: The script is limited to string formatting and generating reports to stdout. There are no high-risk capabilities such as network access, arbitrary command execution, or file writing.
Sanitization: Standard json.load() is used for parsing. Since the skill lacks dangerous capabilities to abuse, this ingestion surface is considered safe.

programmatic-seo