seo-audit
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to fetch and analyze external website content using tools like
web_fetchandcurl. This creates a vulnerability where an attacker-controlled website could embed malicious instructions (e.g., hidden in HTML comments or metadata) to manipulate the agent's response or actions during the audit process. - Ingestion points: Website content retrieved via
web_fetchandcurlcommands mentioned in the 'Audit Framework' and 'Tools Referenced' sections ofSKILL.md. - Boundary markers: The instructions lack specific guidance on using delimiters or safety prompts to distinguish between data being audited and instructions to be followed by the agent.
- Capability inventory: The skill utilizes network fetching capabilities to retrieve data for analysis and provides a framework for detailed site review.
- Sanitization: There are no instructions for sanitizing, escaping, or filtering the fetched HTML content before it is processed by the agent's logic.
Audit Metadata