seo-fundamentals

Pass

Audited by Gen Agent Trust Hub on Nov 5, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/seo_checker.py performs local file system operations using the Python standard library to identify and read HTML, JSX, and TSX files. It uses pathlib.Path.glob to find files and read_text() to inspect their contents for SEO-related patterns. These operations are within the scope of its stated purpose as an SEO auditing tool.
  • [DATA_EXPOSURE]: The script reads local project files to identify missing SEO tags. It does not perform any network operations, and it does not access sensitive system paths (e.g., .ssh, .aws, .env). The analysis is restricted to files intended to be public-facing web pages.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted local files (HTML/JSX/TSX). However, the script only returns metadata about identified SEO issues (e.g., "Missing tag") rather than the raw file content to the agent. This architectural choice effectively mitigates the risk of instructions inside analyzed files influencing the agent's behavior.
  • [REMOTE_CODE_EXECUTION]: The skill only uses Python standard library modules (sys, json, re, pathlib, datetime). It does not download external code, use package managers, or employ dynamic execution functions like eval() or exec() on external data.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 5, 2026, 06:22 AM