seo-headings-structure
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the Bash tool to execute a local verification script (
parse-html.mjs) located within the project's script directory (${CLAUDE_SKILL_DIR}/../../scripts/). This is a standard functional component of the skill's verification process. - [PROMPT_INJECTION]: The skill ingests and processes untrusted HTML data from page snapshots. While this is a surface for indirect prompt injection, the skill's logic is constrained to structural analysis (extracting heading tags) and requires user approval for proposed fixes, which effectively mitigates the risk.
Audit Metadata