seo-audit
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface for indirect prompt injection via its external data ingestion script.
- Ingestion points: The script
scripts/seo_checker.pyusesurllib.request.urlopento fetch HTML content from external URLs provided during an audit. - Boundary markers: The script extracts and returns content from tags like
<title>,<meta description>, and headings. These values are returned to the agent without specific delimiters or instructions to treat the content as untrusted data. - Capability inventory: The skill utilizes local Python execution for its core analysis logic, including network fetching and file reading.
- Sanitization: No sanitization or filtering is performed on the text extracted from the external HTML tags before it is presented to the agent's context.
- [COMMAND_EXECUTION]: The skill includes two Python scripts,
scripts/seo_checker.pyandscripts/seo_health_scorer.py, which are intended to be executed by the agent to perform SEO audits and health scoring. These scripts facilitate file system access and network operations as part of their primary functionality.
Audit Metadata