ley-25326
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external URLs provided by the user to generate compliance reports. This creates an attack surface where a malicious website could include hidden instructions to influence the audit outcome.
- Ingestion points: Website content and metadata from the target URL (e.g.,
https://ejemplo.com.ar) provided in the arguments. - Boundary markers: Absent. The skill does not provide explicit delimiters or instructions to ignore embedded commands within the fetched content.
- Capability inventory: The skill has file-writing capabilities, instructing the agent to save Markdown and DOCX reports to a specific local path (
C:/Users/cmano/claude-seo/...). - Sanitization: Absent. There are no instructions for sanitizing or filtering the content retrieved from the target URL before processing.
- [COMMAND_EXECUTION]: The skill contains specific instructions to save generated audit reports to a hardcoded local directory structure (
C:/Users/cmano/claude-seo/[cliente]/). While this is part of the skill's intended reporting functionality, hardcoding absolute user-level paths is a rigid practice that identifies a specific local environment.
Audit Metadata