seo-content
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes a local script
scripts/analyze-keywords.tsusing thebunruntime to perform its primary keyword density and distribution analysis. This is a functional requirement of the skill and uses standard command-line parameters for input. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external content (via URLs or file paths). This creates a potential surface for indirect prompt injection if the processed content contains malicious instructions intended to influence the agent's behavior.
- Ingestion points: The
<url-or-path>argument passed toscripts/analyze-keywords.tsinSKILL.md. - Boundary markers: None explicitly defined in the skill instructions to separate content from instructions.
- Capability inventory: The skill utilizes local command execution (
bun run) to process data. - Sanitization: No specific sanitization or filtering logic is described in the prompt instructions for the external content.
- [SAFE]: All instructions and referenced scripts relate directly to the stated purpose of SEO content auditing (E-E-A-T scoring, metadata validation, and semantic analysis). No obfuscation, data exfiltration, or persistence mechanisms were detected.
Audit Metadata