seo-internal-linking

Pass

Audited by Gen Agent Trust Hub on Jun 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill uses the WebFetch tool to retrieve raw_html or rendered_dom from external websites for SEO analysis.
  • [COMMAND_EXECUTION]: The skill executes a local Node.js script located at ${CLAUDE_SKILL_DIR}/../../scripts/link-graph.mjs to build link graphs and verify site topology.
  • [PROMPT_INJECTION]: The skill ingests untrusted HTML data from external URLs, which represents a surface for indirect prompt injection.
  • Ingestion points: rendered_dom and raw_html accessed via WebFetch from arbitrary URLs provided during audits.
  • Boundary markers: The skill does not explicitly define delimiters or instructions to ignore embedded content within the processed HTML.
  • Capability inventory: The agent has access to Bash (for local script execution), WebFetch, Read, Grep, and Glob tools.
  • Sanitization: No specific sanitization or filtering logic is mentioned for the ingested web content before analysis or diff generation.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 15, 2026, 08:09 PM
Security Audit — agent-trust-hub — seo-internal-linking