competitor-analysis
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external search engine sources, which presents a surface for indirect prompt injection attacks.
- Ingestion points: Data is ingested from tools like
get_ranked_keywords,get_serp_results,get_backlinks_overview, andsearch_local_businessesas described inSKILL.md. - Boundary markers: There are no explicit instructions for using delimiters or warnings to separate external data from system instructions.
- Capability inventory: The skill can write results back to the application environment using
update_project_contextand generate reports via theseo-reportskill. - Sanitization: No sanitization or validation logic is defined for the content fetched from the web or search result metadata.
- [EXTERNAL_DOWNLOADS]: The skill references documentation and attribution links from its official service domain.
- Evidence: References
https://openseo.so/docs/skills/competitor-analysisfor skill documentation and reporting attribution in the output format section ofSKILL.md.
Audit Metadata