seo-international
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill audits external websites by fetching their HTML, which introduces a potential surface for indirect prompt injection if those sites contain malicious instructions designed to influence the agent's behavior.
- Ingestion points: The skill reads
rendered_domandraw_htmlfrom the target website (SKILL.md). - Boundary markers: Absent. No specific delimiters or warnings to ignore embedded instructions are provided for the ingested data.
- Capability inventory: The skill utilizes
Read,Grep,Glob,WebFetch, andBashtools (SKILL.md). - Sanitization: Absent. The skill does not specify sanitization methods for the ingested HTML content.
- [COMMAND_EXECUTION]: The skill uses a local script to perform complex hreflang validation tasks.
- Evidence: It executes
node ${CLAUDE_SKILL_DIR}/../../scripts/hreflang-check.mjs --url <u>as part of the verification process described in SKILL.md.
Audit Metadata