keyword-cluster

Pass

Audited by Gen Agent Trust Hub on Aug 12, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes a local Python script (keyword_cluster.py) stored within the plugin's root directory. This script performs the core logic for keyword clustering and intent grouping based on provided input files.
  • [PROMPT_INJECTION]: The skill processes untrusted data from seed keyword CSVs and JSON SERP results, creating a surface for indirect prompt injection. • Ingestion points: Data enters the context from user-provided CSV seeds and external rank-tracker JSON outputs stored in the plugin data directory. • Boundary markers: The skill does not define specific delimiters for the ingested content when drafting pillar page briefs. • Capability inventory: The skill executes a local Python script and writes intermediate and final files to the plugin data directory. • Sanitization: The skill applies a compliance filter to keywords before they are used in the clustering process.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 12, 2026, 10:15 PM
Security Audit — agent-trust-hub — keyword-cluster