seo-hreflang
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external websites (HTML tags, HTTP headers, and XML sitemaps) for SEO auditing. This external content is untrusted and could contain malicious instructions intended to influence the agent's behavior.
- Ingestion points: Untrusted data enters the agent context via detected HTML
<link>tags, HTTP headers, and XML sitemap<xhtml:link>entries (SKILL.md). - Boundary markers: No delimiters or explicit instructions are provided to the agent to separate the crawled data from control instructions.
- Capability inventory: The skill invokes a local script (
scripts/parse-hreflang.ts) to process and validate the external data (SKILL.md). - Sanitization: The instructions do not specify any sanitization, filtering, or validation steps to ensure the external content is safe before it is passed to the parsing script.
Audit Metadata