dineway-seo-providers
Pass
Audited by Gen Agent Trust Hub on Aug 13, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted data from external SEO providers like Firecrawl and DataForSEO. This ingestion of arbitrary web content creates an indirect prompt injection surface where malicious content on scraped pages could attempt to influence the agent's behavior during interpretation.
- Ingestion points: The skill ingests raw response payloads through the
dineway seo firecrawlanddineway seo dataforseocommands as described in the Workflow section (SKILL.md). - Boundary markers: Instructions explicitly require loading
security-boundaries.mdbefore ogni provider call and emphasize treating raw payloads as evidence rather than visitor-facing copy. - Capability inventory: Provider evidence is routed to various internal workflows, including the
apply-loopworkflow which may translate recommendations into project changes (SKILL.md). - Sanitization: The skill relies on external reference files (
security-boundaries.md) to define security constraints and manage the trust chain when processing external data.
Audit Metadata