The Agent Skills Directory

[PROMPT_INJECTION]: The skill processes untrusted data from external websites, creating an indirect prompt injection attack surface.
Ingestion points: Website content is retrieved from user-provided URLs via the WebFetch tool.
Boundary markers: No explicit delimiters are used to separate fetched content from the agent's internal instructions.
Capability inventory: The agent has access to Bash, Read, and Write tools as defined in the allowed-tools list.
Sanitization: The skill does not describe any specific sanitization or validation of the fetched content before analysis.

seo-audit