The Agent Skills Directory

[PRIVILEGE_ESCALATION]: The skill's documentation explicitly recommends using sudo apt install to install dependencies such as libimage-exiftool-perl and webp. If an AI agent attempts to follow these troubleshooting steps autonomously to resolve missing tool errors, it could lead to unauthorized privilege escalation within the execution environment.
[REMOTE_CODE_EXECUTION]: The skill relies on and executes external Python scripts (parse_html.py and iptc_ai_label.py) via a custom claude-seo run command. These scripts are not provided in the skill distribution, representing a dependency on unverifiable external code that could be substituted or modified by a third party.
[COMMAND_EXECUTION]: The skill invokes several powerful system utilities, including exiftool, cwebp, convert (ImageMagick), and ffmpeg, using parameters and file paths derived from user input and external data. This increases the risk of command injection if paths or metadata fields are not properly sanitized.
[INDIRECT_PROMPT_INJECTION]: The skill possesses a broad attack surface for indirect prompt injection by ingesting and processing untrusted data.
Ingestion points: Data enters the agent's context from external URLs (HTML source), image file metadata (EXIF, IPTC, XMP), and DataForSEO SERP rankings.
Boundary markers: There are no specified delimiters or instructions to treat the analyzed data as untrusted, which may lead the agent to interpret embedded text as authoritative instructions.
Capability inventory: The skill has access to shell execution and external script invocation, which could be abused if an injection is successful.
Sanitization: No sanitization or validation of fields like alt text or IPTC captions is described before they are processed by the agent or passed to CLI tools.
[EXTERNAL_DOWNLOADS]: The skill refers to external software sources (Ubuntu/Debian package repositories) for tool installation. While these are well-known services, the requirement to install additional system binaries at runtime increases the complexity and risk profile of the skill's dependencies.

seo-images