page-deep-dive

Pass

Audited by Gen Agent Trust Hub on Nov 9, 2026

Risk Level: SAFE
Full Analysis
  • [PROMPT_INJECTION]: No patterns of prompt injection, role-play bypass, or instructions to ignore safety guidelines were detected. The instructions focus purely on task-oriented workflow steps.
  • [DATA_EXFILTRATION]: No evidence of unauthorized data access or exfiltration. The skill uses specialized tools for SEO data retrieval and does not attempt to access sensitive system files or send data to untrusted external domains.
  • [REMOTE_CODE_EXECUTION]: No remote code execution patterns or unverifiable package installations were found. The workflow relies on a predefined set of internal tools.
  • [OBFUSCATION]: No obfuscated content, such as Base64-encoded strings, zero-width characters, or homoglyphs, was detected in the skill file.
  • [INDIRECT_PROMPT_INJECTION]: While the skill ingests data from external sources (Google Search Console, Google Analytics 4, and web audits), it lacks dangerous capabilities such as file system writes, shell command execution, or arbitrary network operations. The risk of data-driven exploitation is negligible as the agent's actions are limited to generating markdown reports.
  • [DYNAMIC_CONTEXT_INJECTION]: The skill does not use any dynamic context injection syntax (!command) to execute shell commands during the loading process.
  • [CREDENTIALS_UNSAFE]: No hardcoded credentials, API keys, or secrets were found. The skill mentions standard service quotas and documentation for authentication (MCP) but does not expose any credentials.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 9, 2026, 07:35 AM