seo-social-cards
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external content (HTML/DOM) to extract and audit metadata tags. This constitutes an indirect prompt injection surface if malicious instructions were embedded in the processed page.
- Ingestion points: The
rendered_domorraw_htmlof target pages provided via the environment. - Boundary markers: The skill does not define specific delimiters or instructions to ignore embedded content within the processed HTML.
- Capability inventory: Uses
Read,Grep,Glob,WebFetch, andBashto perform checks and assertions against the audited content. - Sanitization: No explicit sanitization or filtering of the ingested HTML is described before auditing.
- [COMMAND_EXECUTION]: The skill utilizes
Bashto execute aheader_checkutility. This tool is specifically intended to verify the reachability, HTTP status code (200), and image dimensions of social media assets referenced in metadata.
Audit Metadata