seo-monitor
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests external data from Google Search Console, including query text and page URLs, which could contain malicious instructions embedded by third parties on indexed web pages.
- Ingestion points: Data is retrieved from the environment using
mcp__cogny__search_console__*tools as described inSKILL.md. - Boundary markers: The skill does not define specific delimiters or "ignore" instructions to separate retrieved search data from the agent's primary instructions.
- Capability inventory: The skill has access to
WebFetch,WebSearch, andmcp__cogny__create_findingtools, which could be misused if the agent follows instructions embedded in the search data. - Sanitization: There is no evidence of filtering, validation, or escaping logic applied to the external SEO data before it is processed into the final report.
Audit Metadata