seo-copywriter-pro
Pass
Audited by Gen Agent Trust Hub on Jun 24, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill operates as a content generator that consumes user-provided configuration (e.g.,
pages.json) and prompts to produce markdown and TSX files. This creates a surface for indirect prompt injection where malicious instructions could be embedded in the output. - Ingestion points: Configuration files and user prompt inputs processed by the generation scripts.
- Boundary markers: No explicit boundary markers or 'ignore' instructions are used in the generation templates.
- Capability inventory: The skill includes scripts capable of writing to the local file system (
scripts/generate-batch.py) and making network requests (scripts/pele-seo-auditor.py). - Sanitization: User-provided data is interpolated directly into templates using Python's
.format()method without validation or escaping for HTML/JSX contexts. - [EXTERNAL_DOWNLOADS]: The
pele-seo-auditor.pyscript includes functionality to perform network requests to the Google PageSpeed Insights API (a well-known service) and to arbitrary URLs for the purpose of SEO auditing. These operations are standard and necessary for the tool's intended use-case.
Audit Metadata