content-seo-optimizer
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it scrapes external web content and incorporates it into the prompt sent to the LLM for analysis.
- Ingestion points: The
scrape_pagefunction inscripts/seo_audit.pyfetches data from arbitrary URLs provided via the--urlargument. - Boundary markers: The
generate_audit_promptfunction inscripts/seo_audit.pyinterpolates scraped data (title, meta description, H1, headings, and word count) directly into the system prompt without explicit delimiters or warnings to ignore embedded instructions. - Capability inventory: The skill possesses network access (via the
requestslibrary) and the ability to write files to the local file system (viasave_reportinscripts/seo_audit.py). - Sanitization: Content is partially cleaned of
script,style,nav,footer, andheadertags using BeautifulSoup, but the resulting text is not sanitized against adversarial prompt instructions hidden in the body or metadata of the target page.
Audit Metadata