seo-score
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The instructions direct the agent to use the Bash tool to execute a local script (scripts/score.mjs) to perform calculations.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests findings data following a specific schema, which provides a path for untrusted data to enter the agent's context and potentially influence its logic.
- Ingestion points: findings JSON processed as the primary input for scoring.
- Boundary markers: None present to isolate data from agent instructions.
- Capability inventory: Uses Bash for command execution and Read for file access.
- Sanitization: No sanitization or validation of string data within the findings is described.
Audit Metadata