seo-page
Pass
Audited by Gen Agent Trust Hub on Aug 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze content from external, user-provided URLs, which creates a potential surface for indirect prompt injection.
- Ingestion points: Web page content (title tags, meta descriptions, H1-H6 headers, schema markup, and image attributes) fetched from the provided URL (SKILL.md).
- Boundary markers: The instructions do not define specific delimiters or instructions to the agent to treat the fetched page content strictly as untrusted data.
- Capability inventory: The skill uses analysis tools and optional DataForSEO MCP integrations (
serp_organic_live_advanced,backlinks_summary) to generate reports and JSON-LD schema suggestions. - Sanitization: There are no explicit instructions to sanitize, escape, or filter the content retrieved from the external URL before it is processed by the agent.
Audit Metadata