seo-maps
Pass
Audited by Gen Agent Trust Hub on Aug 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from business websites and external APIs, creating a surface for potential indirect prompt injection attacks.- Ingestion points: The skill uses WebFetch to scrape business websites and retrieves data from DataForSEO, Overpass API, and Geoapify POI search.- Boundary markers: No specific delimiters or "ignore embedded instructions" warnings are defined for the handling of ingested content.- Capability inventory: The skill generates analysis reports in markdown and JSON-LD schema files, and performs network operations via API integrations.- Sanitization: No explicit data sanitization or validation steps are described for external data before it is included in generated reports or code blocks.- [EXTERNAL_DOWNLOADS]: The skill integrates with multiple third-party services including DataForSEO, Google Maps Platform, Overpass API, Geoapify, and Nominatim. These are standard, well-known services for the skill's intended SEO and mapping purpose and do not represent a security risk.
Audit Metadata