seo-ecommerce
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute several local Python scripts (fetch_page.py, parse_html.py, dataforseo_merchant.py) that accept user-supplied URLs and keywords as command-line arguments.
- [INDIRECT_PROMPT_INJECTION]: The skill's primary workflow involves fetching and analyzing content from external web pages, which is an untrusted data source.
- Ingestion points: Raw HTML content is fetched from product pages via the scripts/fetch_page.py script.
- Boundary markers: The instructions do not include any delimiters or instructions for the agent to ignore or isolate instructions that may be embedded in the fetched HTML.
- Capability inventory: The skill can execute shell commands via local scripts and triggers further SEO reporting commands.
- Sanitization: No sanitization, validation, or filtering of the external HTML content is mentioned in the skill instructions.
Audit Metadata