get-crawl-report
Pass
Audited by Gen Agent Trust Hub on Jul 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns or high-risk security concerns were identified during the analysis of the skill's instructions and configuration.
- [COMMAND_EXECUTION]: The skill involves the use of command-line tools to interact with SEO reports. The instructions provide specific patterns for using the
seoutility to describe and execute report tasks. - Evidence:
seo reports describe get-crawl-report --json,seo reports run get-crawl-report --params '{"id":"crawl_example_20260710","includeIssues":true}' --json. - [PROMPT_INJECTION]: An indirect prompt injection surface is present because the skill processes content from previously saved web crawl reports, which contain untrusted data from external websites.
-
- Ingestion points: The
seo_run_reporttool as described in SKILL.md.
- Ingestion points: The
-
- Boundary markers: Absent; there are no specific instructions to the agent to treat crawl data as untrusted or separate it from system instructions.
-
- Capability inventory: Tool access includes
seo_list_reports,seo_describe_report, andseo_run_reportfor report management.
- Capability inventory: Tool access includes
-
- Sanitization: None specified in the provided instructions.
Audit Metadata