seo-audit
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill directs the agent to analyze external websites using tools like
web_fetchorcurl, which can ingest untrusted data into the agent's context.\n - Ingestion points: Website content and schema markup retrieved from external URLs provided by the user as part of the audit process in
SKILL.md.\n - Boundary markers: The instructions do not define delimiters or specific "ignore" commands to help the agent distinguish between the audit instructions and potentially malicious commands embedded in the target website's content.\n
- Capability inventory: The agent reads internal context files (e.g.,
.claude/product-marketing-context.md) and generates detailed SEO audit reports based on the ingested data.\n - Sanitization: There are no specific instructions for the agent to sanitize, escape, or validate the content retrieved from external sites before processing it.
Audit Metadata