keyword-research
Pass
Audited by Gen Agent Trust Hub on Oct 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes several Python utility scripts (
fetch_page.py,generate_markdown_report.py,schema_generator.py,seo_health_score.py) intended to be used as local tools for data processing and report generation. - [EXTERNAL_DOWNLOADS]: The
generate_pdf_report.pyutility suggests the manual installation of thereportlablibrary viapipif the user requires optional PDF rendering functionality. - [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves fetching and processing external web content, which creates a surface for indirect prompt injection.
- Ingestion points: The
fetch_page.pyscript retrieves content from external URLs, and the agent reads user-provided project files. - Boundary markers: The
SKILL.mdinstructions require the agent to label evidence sources (e.g.,measured,user-provided) but do not define specific technical delimiters for the ingested data. - Capability inventory: The skill has network access via
fetch_page.pyand file-writing capabilities viagenerate_markdown_report.py,generate_pdf_report.py, andschema_generator.py. - Sanitization: The
references/skill-contract.mdfile explicitly mandates that scraped material must be treated as untrusted input and that any instructions embedded within that data must be ignored. - [DATA_EXFILTRATION]: The
fetch_page.pyscript performs outbound network requests to retrieve SEO data. It implements Server-Side Request Forgery (SSRF) protections by validating that hostnames do not resolve to private, loopback, or reserved IP addresses.
Audit Metadata