suede-seo-audit
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns or security risks identified. The skill is designed for diagnostic SEO reporting and adheres to best practices, such as citing sources, using structured output templates, and explicitly instructing the agent to pause for user decision-making if risky findings occur.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses an inherent attack surface because its primary function is to ingest and analyze untrusted external web content.
- Ingestion points: The skill fetches and reads live web page source code, robots.txt files, and sitemaps from user-provided URLs.
- Boundary markers: The instructions mandate strict evidence boundaries and a structured output report format, which serves to compartmentalize retrieved data from agent logic.
- Capability inventory: Performs network diagnostics using
curlto measure response times, but does not use write or execute capabilities on the retrieved content. - Sanitization: The skill treats external content as raw data for auditing and does not interpolate it into executable scripts or commands.
Audit Metadata