firecrawl-seo-audit
Pass
Audited by Gen Agent Trust Hub on Oct 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes untrusted data from external websites during the SEO audit workflow.
- Ingestion points: The skill maps and scrapes content from user-provided URLs and competitor pages, extracting metadata, headings, and site structure.
- Boundary markers: The instructions do not define explicit delimiters or instructions to treat scraped content as data rather than instructions.
- Capability inventory: The skill generates a markdown report; it does not appear to utilize dangerous capabilities such as arbitrary command execution, system file writes, or unexpected network operations.
- Sanitization: There are no explicit requirements for the agent to sanitize or filter the content retrieved from external sources before processing it.
Audit Metadata