seo-technical

Pass

Audited by Gen Agent Trust Hub on Nov 7, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONREMOTE_CODE_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes several Python utility scripts such as seo_health_score.py and schema_generator.py. These scripts are designed for routine data processing, health score calculation, and local file management related to SEO audits.
  • [EXTERNAL_DOWNLOADS]: The fetch_page.py script provides a utility for the agent to fetch web content from external URLs. It implements security best practices by validating that hostnames do not resolve to private, loopback, or reserved IP addresses, effectively preventing SSRF attacks during the audit process.
  • [INDIRECT_PROMPT_INJECTION]: The skill's instructions in SKILL.md and the skill-contract.md reference file provide explicit guidance for the agent to treat all scraped data as untrusted input. It specifically instructs the agent not to execute or follow any instructions found within the collected evidence, such as page text or metadata.
  • [REMOTE_CODE_EXECUTION]: The generate_pdf_report.py script references the optional use of the reportlab library for PDF generation. This is a standard third-party dependency for the task and does not involve the execution of untrusted remote code or binary payloads.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 7, 2026, 09:05 AM