seo-maps
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external websites (via WebFetch) and multiple third-party APIs (DataForSEO, Google Maps, Bing) to generate business analysis reports. This data is untrusted and could contain malicious instructions designed to influence the agent's behavior during report generation.
- Ingestion points: Website content fetched via
WebFetch, API responses from DataForSEO, and place data from Google Maps. - Boundary markers: No specific delimiters or 'ignore embedded instructions' warnings are implemented for the processing of ingested data.
- Capability inventory: The skill writes report files to the local system (
MAPS-ANALYSIS-{domain}.md) and performs network operations via external tools. - Sanitization: No explicit sanitization or validation of the external content is mentioned before it is processed into the report.
- [EXTERNAL_DOWNLOADS]: The skill utilizes several external services and encourages the use of platform extensions, including DataForSEO, Google Maps Platform, Overpass API, Geoapify, and Nominatim. It also fetches search results from Bing and references Apple Business Connect.
Audit Metadata