seo-hreflang
Pass
Audited by Gen Agent Trust Hub on Oct 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The script
scripts/fetch_page.pyincorporates robust SSRF mitigations by validating that URLs use allowed protocols and ensuring that resolved IP addresses are global and not part of private or reserved ranges. - [INDIRECT_PROMPT_INJECTION]: The skill instructions and shared contracts explicitly define external data as untrusted, instructing the agent to ignore any embedded commands within ingested content, which effectively manages the risk of indirect prompt injection.
- [SAFE]: All included scripts, such as those for report generation and health score calculation, perform deterministic tasks on local data without employing dangerous functions like
eval()orexec(). - [SAFE]: The suggestion to install the standard
reportlablibrary for PDF generation is handled transparently and does not involve automated or unverifiable remote code execution.
Audit Metadata