seo-fundamentals
Pass
Audited by Gen Agent Trust Hub on Apr 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides educational SEO content and a local analysis script. It does not perform network operations, execute arbitrary commands, or access sensitive system credentials.
- [PROMPT_INJECTION]: The skill presents a surface for indirect prompt injection by reading local project files, but the risk is assessed as safe due to the static nature of the analysis. (1) Ingestion points: Reads .html, .jsx, and .tsx files via Path.glob and Path.read_text in scripts/seo_checker.py. (2) Boundary markers: None present in the analyzed files; the script returns structured analysis results to the user. (3) Capability inventory: The script uses basic file reading and globbing. It does not include subprocess execution, network access, or write capabilities. (4) Sanitization: The script uses regular expressions and literal string matching for specific SEO tags (like title, description, and alt), which ignores any executable logic or instructions within the analyzed files.
Audit Metadata