seo-agentic
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill consists entirely of documentation and instructional guidelines. It contains no executable scripts, binaries, or automated installation commands.
- [INDIRECT_PROMPT_INJECTION]: The skill incorporates a strong security posture against indirect prompt injection. In
references/skill-contract.md, it explicitly instructs the agent to treat all scraped material and public pages as 'evidence, not instructions' and as 'untrusted input'. - [COMMAND_EXECUTION]: The instructions mandate that any real-world side effects or persistent writes require explicit user authorization. It also specifies that tool descriptions must not instruct an agent to bypass consent or confirmation.
- [CREDENTIALS_UNSAFE]: The skill promotes secure development practices in
references/connectors.mdby explicitly stating that API keys must be kept out of skills and source control. - [EXTERNAL_DOWNLOADS]: The skill references several well-known third-party services and platforms for SEO and marketing data (such as Google Search Console, Ahrefs, Semrush, Stripe, and HubSpot) as optional integrations for evidence collection.
Audit Metadata