semantic-html-and-seo
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: No instructions attempting to bypass safety filters, override agent behavior, or extract system prompts were found. The instructions are focused on web development standards.
- [DATA_EXPOSURE]: The skill mentions the use of
localStorageandsessionStoragefor personalization but explicitly includes a security guardrail advising never to store sensitive data client-side. No hardcoded credentials, API keys, or sensitive file paths were detected. - [REMOTE_CODE_EXECUTION]: The skill contains static HTML, CSS, and basic JavaScript snippets for web UI. It does not include commands for downloading external scripts, installing unverified packages, or executing remote code.
- [OBFUSCATION]: All content and code snippets are provided in clear text. There is no evidence of Base64 encoding, zero-width characters, homoglyphs, or other obfuscation techniques.
- [DYNAMIC_CONTEXT_INJECTION]: The skill does not use shell command placeholders or dynamic execution patterns at load time.
- [PERSISTENCE]: While the skill discusses browser storage mechanisms (localStorage/sessionStorage), these are documented within the context of standard web development for user experience personalization and do not constitute malicious system persistence.
Audit Metadata