seo-programmatic
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists entirely of markdown documentation and instructions for SEO strategic planning. No malicious patterns, obfuscation, or persistence mechanisms were identified.
- [NO_CODE]: No scripts, executables, or code snippets are included in the skill package, effectively eliminating direct local code execution or privilege escalation risks.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for indirect prompt injection by instructing the agent to analyze external data sources. Ingestion points: User-provided CSV/JSON files, API endpoints, and database queries referenced in SKILL.md. Boundary markers: None specified in the template instructions. Capability inventory: The skill does not provide or request any tools, shell commands, or network access; it relies on the agent's existing environment for assessment. Sanitization: No explicit sanitization, validation, or escaping steps are defined for the analyzed data content.
Audit Metadata