The Agent Skills Directory

[SAFE]: The skill provides a set of reference documents and a Python utility for SEO auditing. The implementation is transparent and follows its stated purpose without any suspicious behavior.
[COMMAND_EXECUTION]: The script scripts/test_audit_page.py uses subprocess.run to invoke the sibling script audit_page.py for automated testing. This is a legitimate use of the subprocess module for verifying internal tool functionality within a controlled environment.
[INDIRECT_PROMPT_INJECTION]: The scripts/audit_page.py tool ingests HTML data from external URLs or local files to extract metadata. While this constitutes a data ingestion surface for untrusted content, the tool is restricted to extracting specific structural signals (like title tags and JSON-LD types) and does not execute or evaluate the content, which maintains a low risk profile for injection attacks.

seo-analysis