localseodata-tool
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external sources, creating a potential surface for adversarial instructions to reach the agent.
- Ingestion points: Untrusted data enters the agent context through endpoints such as
google_reviews,organic_serp, andmulti_platform_reviewsas documented inSKILL.md. - Boundary markers: The documentation does not suggest the use of specific delimiters or safety instructions to isolate external content from the agent's primary instructions.
- Capability inventory: The skill performs network operations by communicating with the
mcp.localseodata.comserver. - Sanitization: There is no mention of sanitization or filtering logic for the strings retrieved from external web sources.
Audit Metadata