seo-technical
Pass
Audited by Gen Agent Trust Hub on Nov 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes several Python utility scripts such as
seo_health_score.pyandschema_generator.py. These scripts are designed for routine data processing, health score calculation, and local file management related to SEO audits. - [EXTERNAL_DOWNLOADS]: The
fetch_page.pyscript provides a utility for the agent to fetch web content from external URLs. It implements security best practices by validating that hostnames do not resolve to private, loopback, or reserved IP addresses, effectively preventing SSRF attacks during the audit process. - [INDIRECT_PROMPT_INJECTION]: The skill's instructions in
SKILL.mdand theskill-contract.mdreference file provide explicit guidance for the agent to treat all scraped data as untrusted input. It specifically instructs the agent not to execute or follow any instructions found within the collected evidence, such as page text or metadata. - [REMOTE_CODE_EXECUTION]: The
generate_pdf_report.pyscript references the optional use of thereportlablibrary for PDF generation. This is a standard third-party dependency for the task and does not involve the execution of untrusted remote code or binary payloads.
Audit Metadata