seo-cluster
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted text from external web sources, which could contain malicious instructions designed to influence the agent's behavior during the expansion or clustering phases. \n
- Ingestion points: In
SKILL.md(Step 1), the skill ingests 'Related searches' and 'People Also Ask' (PAA) questions from WebSearch. Inreferences/serp-overlap-methodology.md, it ingests URL sets and organic result data from search engines and the DataForSEO API. \n - Capability inventory: The skill possesses file-writing capabilities (creating
.jsonplans,.mdbriefs, and.htmlvisualizations) and can invoke theblog-writeskill for automated content creation. \n - Boundary markers: The instructions do not define specific delimiters or instructional barriers to prevent the agent from following commands embedded in the retrieved search queries or PAA questions. \n
- Sanitization: There is no explicit mechanism described to sanitize or filter the external text data before it is interpolated into prompts for subsequent tasks. \n- [COMMAND_EXECUTION]: The skill executes local Python scripts to facilitate its operations. \n
- Evidence:
SKILL.mdandreferences/serp-overlap-methodology.mdspecify the execution ofpython scripts/dataforseo_costs.pyandpython scripts/fetch_page.pyvia subprocess calls. \n- [EXTERNAL_DOWNLOADS]: The skill retrieves data from external web services as part of its core functionality. \n - Evidence: It performs network requests to search engines (via WebSearch) and the DataForSEO API to obtain SERP data. It also references the related skill repository at
github.com/AgriciDaniel/claude-blogfor content execution.
Audit Metadata