seo
Pass
Audited by Gen Agent Trust Hub on Nov 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes content from external URLs, establishing an indirect prompt injection attack surface. This is effectively managed by explicit instructions in the SKILL.md and references/skill-contract.md files. 1. Ingestion points: The scripts/fetch_page.py script retrieves data from external websites. 2. Boundary markers: The agent is instructed to treat all external findings as untrusted and to disregard any instructions contained within them. 3. Capability inventory: The skill can perform network operations and write reports to the local file system using the provided scripts. 4. Sanitization: The fetch_page.py script performs basic sanitization by extracting specific HTML tags and stripping HTML elements from text.
- [COMMAND_EXECUTION]: The skill includes several deterministic Python scripts for automated SEO auditing and scoring. These scripts operate as local tools with a clearly defined scope.
- [EXTERNAL_DOWNLOADS]: The scripts/generate_pdf_report.py script identifies an optional dependency on the reportlab library for PDF generation and provides instructions for its installation.
Audit Metadata