seo-geo-aeo
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external websites via
WebFetchto perform its audit, which creates a potential surface for indirect prompt injection attacks.\n - Ingestion points: The skill instructions in
SKILL.mddirect the agent to fetch HTML,robots.txt, andsitemap.xmlfrom user-specified targets.\n - Boundary markers: There are no explicit instructions or delimiters defined to separate the fetched content from the agent's internal instructions.\n
- Capability inventory: The agent is limited to web fetching and markdown report generation; no file system access or shell command capabilities are enabled.\n
- Sanitization: The skill does not implement any mechanisms to sanitize or filter the content retrieved from external sources.
Audit Metadata