seo-score

Pass

Audited by Gen Agent Trust Hub on Jun 15, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill invokes the Bash tool to execute a local script, scripts/score.mjs, to process input data. This usage is for functional, deterministic mathematical calculations as described in the skill's purpose and does not involve remote code or unauthorized commands.
  • [PROMPT_INJECTION]: The skill presents a surface for indirect prompt injection as it processes external findings data to compute scores.
  • Ingestion points: External findings JSON data conforming to schema/finding.schema.json used in Step 1.
  • Boundary markers: No specific delimiters or "ignore instructions" markers are defined for the ingested data.
  • Capability inventory: The skill uses Bash to run a scoring script and Read to access reference files (references/scoring-model.md).
  • Sanitization: No explicit sanitization or validation logic for the input findings is described in the prompt instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 15, 2026, 08:09 PM
Security Audit — agent-trust-hub — seo-score