seo-internal-linking
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses the
WebFetchtool to retrieveraw_htmlorrendered_domfrom external websites for SEO analysis. - [COMMAND_EXECUTION]: The skill executes a local Node.js script located at
${CLAUDE_SKILL_DIR}/../../scripts/link-graph.mjsto build link graphs and verify site topology. - [PROMPT_INJECTION]: The skill ingests untrusted HTML data from external URLs, which represents a surface for indirect prompt injection.
- Ingestion points:
rendered_domandraw_htmlaccessed viaWebFetchfrom arbitrary URLs provided during audits. - Boundary markers: The skill does not explicitly define delimiters or instructions to ignore embedded content within the processed HTML.
- Capability inventory: The agent has access to
Bash(for local script execution),WebFetch,Read,Grep, andGlobtools. - Sanitization: No specific sanitization or filtering logic is mentioned for the ingested web content before analysis or diff generation.
Audit Metadata