gingiris-seo-geo-agent
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's operational loop involves the ingestion of data from external SEO platforms such as Google Search Console, DataForSEO, and Semrush, creating a vulnerability surface for indirect prompt injection through malicious external content.
- Ingestion points: External API responses containing keyword rankings, search volumes, and site metrics as referenced in SKILL.md and references/full-sop.md.
- Boundary markers: The instructions do not define explicit delimiters or warnings for the agent to encapsulate and isolate data retrieved from external tool outputs.
- Capability inventory: The agent is granted the ability to perform network requests (curl) and write/update local files for reporting and mapping.
- Sanitization: No specific routines for the validation or sanitization of ingested SEO data are specified.
- [COMMAND_EXECUTION]: The skill provides templates for the agent to execute shell commands using curl to communicate with the IndexNow API for search engine indexing tasks. Evidence found in the GEO optimization section of references/full-sop.md.
Audit Metadata