programmatic-seo-spy
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXFILTRATION]: Communicates with established SEO data providers including DataForSEO, SEMrush, Ahrefs, and SimilarWeb to fetch competitive metrics. These interactions are standard for the skill's stated purpose and target reputable technology services.
- [PROMPT_INJECTION]: Ingests and processes data from external competitor websites. This activity introduces a surface for indirect prompt injection as it involves fetching sitemaps and webpage content without explicit boundary markers or sanitization, though such risk is expected for web-analysis tooling.
- [COMMAND_EXECUTION]: Invokes a local Python script for site cataloging via a subprocess call, which is a standard method for modular task execution within the agent environment.
Audit Metadata