seo-local
Pass
Audited by Gen Agent Trust Hub on Oct 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze content from external web pages, which is an untrusted data source. \n
- Ingestion points:
scripts/fetch_page.pyis used to fetch raw HTML and robots.txt files from external URLs. \n - Boundary markers: The
SKILL.mdfile andreferences/skill-contract.mdcontain specific directives to treat scraped material as untrusted and not to follow instructions found within that data. \n - Capability inventory: The skill can write files to the local environment (e.g., markdown and PDF reports) and perform network requests. \n
- Sanitization:
scripts/fetch_page.pyperforms basic metadata extraction using regex and standard HTML unescaping. Thescripts/schema_generator.pyscript uses JSON-safe escaping when interpolating user-provided values into templates.
Audit Metadata