seo-spam-detection
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted external data (website source code and URLs) to detect spam patterns, creating a surface for indirect prompt injection.
- Ingestion points: Website URLs and local source files specified in the input.
- Boundary markers: No boundary markers or instructions to ignore embedded commands are present in the detection process.
- Capability inventory: Utilizes shell commands (
curl,grep,diff) and JavaScript evaluation logic to process data. - Sanitization: No explicit sanitization or filtering of the input content is described before analysis.
- [COMMAND_EXECUTION]: Instructs the agent to use standard utilities like
grepfor pattern searching in project files anddiffto compare server outputs. - [EXTERNAL_DOWNLOADS]: Employs
curlto retrieve content from external URLs for cloaking analysis, which is a core function of the skill's purpose.
Audit Metadata