geo
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it processes untrusted content from external sources.
- Ingestion points: The agent ingests data from user-supplied URLs or file paths using the WebFetch and Read tools.
- Boundary markers: The instructions do not provide any delimiters or warnings to ignore malicious instructions that might be embedded in the content being audited.
- Capability inventory: The skill allows the use of Bash and Task tools, which provide shell command execution capabilities.
- Sanitization: There are no requirements to sanitize or filter the input data before it is processed by the agent or passed to sub-agents.
- [COMMAND_EXECUTION]: The skill instructions direct the agent to use Bash and Task tools to execute system-level commands for SEO auditing, such as seo-crawl-render and seo-score. While these are intended for analysis, the combination of shell access and untrusted input represents a potential vulnerability surface.
Audit Metadata