seo-content
Pass
Audited by Gen Agent Trust Hub on Aug 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to ingest and analyze content from external URLs provided as arguments. This behavior exposes the agent to indirect prompt injection, where an attacker could place malicious instructions on a webpage to be scanned, potentially influencing the agent's behavior during the audit process.
- Ingestion points: External content retrieved from the user-supplied
[url]argument. - Boundary markers: The skill does not explicitly define delimiters or instructions for the agent to treat fetched content as untrusted data.
- Capability inventory: The agent uses tools to fetch web content and then performs text analysis, scoring, and recommendation generation.
- Sanitization: No specific sanitization or filtering logic is provided within the instructions to mitigate instructions embedded in the external content.
Audit Metadata