seo-sxo
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from target URLs and Google Search Engine Results Pages (SERPs) to perform Search Experience Optimization analysis. \n
- Ingestion points: The skill retrieves external content via
scripts/fetch_page.pyand search data through theWebSearchagent capability. \n - Boundary markers: There are no explicit instructions for the agent to delimit or ignore potentially malicious instructions within the fetched data. \n
- Capability inventory: The skill uses text analysis tools and local scripts to parse HTML and extract keywords. \n
- Sanitization: The skill description claims the fetching script is SSRF-safe, though the implementation was not provided for verification. \n- [SAFE]: The skill uses standard analytical methods for SEO auditing. No evidence of obfuscation, hardcoded credentials, persistence mechanisms, or unauthorized privilege escalation was found in the provided files.
Audit Metadata