non-commodity-content
Pass
Audited by Gen Agent Trust Hub on May 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary function is to serve as an SEO strategist. It includes healthy constraints, such as the explicit refusal to invent data (clients, quotes, or statistics) and the requirement for user validation before drafting.
- [DATA_EXFILTRATION]: No patterns of data exfiltration or sensitive credential harvesting were detected. The skill uses WebFetch and WebSearch for its intended purpose of analyzing existing web content for SEO patterns.
- [REMOTE_CODE_EXECUTION]: While the skill configuration allows the 'Bash' tool, there are no instructions within the script that attempt to execute arbitrary or malicious shell commands. The tool list in the frontmatter is a configuration limit rather than a grant of capability.
- [PROMPT_INJECTION]: There are no signs of adversarial instructions, safety bypasses, or attempts to extract system prompts. The instructions are well-structured and focused on the stated task.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses an indirect injection surface as it ingests untrusted data from URLs provided by the user (via WebFetch).
- Ingestion points: External URLs fetched in Step 1 of SKILL.md.
- Boundary markers: Absent; the skill does not explicitly warn the agent to ignore instructions within the fetched HTML.
- Capability inventory: The skill has access to Bash, Read, and Write tools.
- Sanitization: The skill identifies "commodity framing" (structural patterns) rather than directly interpolating the fetched body into a command or executable script, which significantly reduces the risk of malicious payload execution.
Audit Metadata