entity-readiness
Pass
Audited by Gen Agent Trust Hub on Jul 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized data access were detected. The skill's functionality is consistent with its stated purpose of auditing SEO metadata.
- [INDIRECT_PROMPT_INJECTION]: The skill operates on untrusted data fetched from external URLs (crawled web pages). This creates a surface for indirect prompt injection where malicious content on a webpage could attempt to influence the agent's interpretation. However, given the skill's limited capabilities (reporting and analysis), the risk is minimal.
- Ingestion points: External website content processed via
seo_run_reportresults (structuredContent, entities, authors). - Boundary markers: The skill does not explicitly define markers to separate untrusted data from instructions.
- Capability inventory: The skill is restricted to read-only reporting and descriptive tasks via the
seotoolset; it lacks high-privilege operations like file writing or arbitrary command execution. - Sanitization: No explicit sanitization or validation of external content is described in the prompt instructions.
Audit Metadata