seo-coach
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill features a vulnerability surface for indirect prompt injection due to its core functionality of processing untrusted external content.
- Ingestion points: The skill instructions explicitly direct the agent to use "web search" and "browser/page scraping" (found in
SKILL.md) to pull data from arbitrary external domains. - Boundary markers: The instructions lack explicit requirements for the agent to wrap external data in boundary markers (e.g., XML tags or triple backticks) or to treat the ingested text as data rather than instructions.
- Capability inventory: The skill has significant write capabilities, including
update_project_contextand the ability to trigger various SEO workflow tools that can modify project state or consume credits. - Sanitization: No sanitization or filtering protocols are defined for handling the content retrieved from external URLs before it is processed by the agent.
- [NO_CODE]: The skill consists exclusively of markdown instructions and metadata, with no accompanying scripts or executable code included in the repository.
Audit Metadata