Skills
Navigate
skills/hainrixz/claude-seo-ai/seo-agent-readiness/Gen Agent Trust Hub

seo-agent-readiness

Pass

Audited by Gen Agent Trust Hub on Oct 28, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill makes use of the Bash tool and executes shell commands via node and npx. This includes running internal plugin scripts like snapshot.mjs and agent-readiness.mjs, as well as the external lighthouse tool. These commands incorporate environment variables (CLAUDE_PLUGIN_ROOT) and user-provided arguments (<target>, <url>).\n- [INDIRECT_PROMPT_INJECTION]: The skill has a potential attack surface for indirect prompt injection.\n
  • Ingestion points: Processes untrusted data from pages/<slug>.json and pages/<slug>.html (SKILL.md).\n
  • Boundary markers: No specific boundary markers or instructions to ignore embedded commands are present in the processing logic.\n
  • Capability inventory: The skill uses Bash and node to execute shell commands (SKILL.md).\n
  • Sanitization: No explicit sanitization or validation of the ingested content is described before it influences agent logic.\n- [EXTERNAL_DOWNLOADS]: The skill utilizes npx to download and execute the lighthouse package. This is a well-known auditing tool provided via the npm registry.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 28, 2026, 02:36 AM