on-page-seo
Pass
Audited by Gen Agent Trust Hub on Jul 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill correctly handles sensitive information by retrieving API credentials (such as for DataForSEO and various AI providers) from environment variables rather than hardcoding them in scripts.
- [EXTERNAL_DOWNLOADS]: The Python scripts perform network operations to interact with official API endpoints including
api.dataforseo.com,api.openai.com, andapi.anthropic.com. These are well-known technology services, and the interactions are consistent with the skill's stated purpose of providing SEO data and content translation. - [COMMAND_EXECUTION]: A shell script hook (
hooks/pre-tool.sh) is implemented to provide advisory messages to the agent during web fetching tasks. The script uses defensive programming (set -euo pipefail) and does not process untrusted input or execute external commands dangerously. - [DATA_EXFILTRATION]: Analysis of the scripts and instruction files shows no evidence of unauthorized data access or exfiltration. Network communication is limited to the functional requirements of the SEO and translation tools.
Audit Metadata