seo-content-brief
Pass
Audited by Gen Agent Trust Hub on Oct 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external websites via the
scripts/fetch_page.pytool, creating a surface for indirect prompt injection. \n - Ingestion points: External web pages are fetched and processed as evidence for SEO analysis. \n
- Boundary markers: Strong instructions are present in
SKILL.mdandreferences/skill-contract.mdrequiring the agent to treat scraped text as untrusted and to ignore any embedded instructions. \n - Capability inventory: The skill can execute Python scripts, perform network requests, and write report files. \n
- Sanitization: Content is unescaped and stripped of HTML tags, but the primary defense relies on agent-level instructional guardrails. \n- [EXTERNAL_DOWNLOADS]: The script
scripts/generate_pdf_report.pyreferences thereportlabpackage as an optional dependency from a well-known service (PyPI) to support PDF generation.
Audit Metadata