seo-fundamentals
Pass
Audited by Gen Agent Trust Hub on Nov 5, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/seo_checker.pyperforms local file system operations using the Python standard library to identify and read HTML, JSX, and TSX files. It usespathlib.Path.globto find files andread_text()to inspect their contents for SEO-related patterns. These operations are within the scope of its stated purpose as an SEO auditing tool. - [DATA_EXPOSURE]: The script reads local project files to identify missing SEO tags. It does not perform any network operations, and it does not access sensitive system paths (e.g.,
.ssh,.aws,.env). The analysis is restricted to files intended to be public-facing web pages. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted local files (HTML/JSX/TSX). However, the script only returns metadata about identified SEO issues (e.g., "Missing tag") rather than the raw file content to the agent. This architectural choice effectively mitigates the risk of instructions inside analyzed files influencing the agent's behavior.
- [REMOTE_CODE_EXECUTION]: The skill only uses Python standard library modules (
sys,json,re,pathlib,datetime). It does not download external code, use package managers, or employ dynamic execution functions likeeval()orexec()on external data.
Audit Metadata