google-search-ai-optimization

Pass

Audited by Gen Agent Trust Hub on May 16, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The script scripts/audit_page.py performs network requests to fetch HTML content from user-provided URLs using urllib.request.urlopen. This is a core feature designed for auditing live web pages.
  • [COMMAND_EXECUTION]: The script scripts/test_skill.py uses subprocess.run() to execute scripts/validate.py and scripts/audit_page.py during internal testing. These operations are limited to the skill's own directory and are used for validation purposes.
  • [SAFE]: The skill ingests untrusted data from external URLs or local HTML files via scripts/audit_page.py. The script parses this content into structured signals (e.g., meta tags, headings, and JSON-LD) and returns them as a JSON object, providing a clear boundary that prevents the agent from directly executing any instructions contained within the audited data.
Audit Metadata
Risk Level
SAFE
Analyzed
May 16, 2026, 08:35 AM
Security Audit — agent-trust-hub — google-search-ai-optimization