market-seo
Pass
Audited by Gen Agent Trust Hub on Apr 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes a Python script
scripts/analyze_page.pyto programmatically extract metadata, heading structures, and technical indicators from a target URL provided by the user. - [PROMPT_INJECTION]: The skill identifies a surface for indirect prompt injection as it processes and summarizes content fetched from external, untrusted websites.
- Ingestion points: Data enters the context via the output of
scripts/analyze_page.pywhich contains scraped content from the target URL (SKILL.md, Step 1). - Boundary markers: The skill lacks explicit delimiters or instructions to the model to ignore potential adversarial commands embedded in the scraped webpage data.
- Capability inventory: The skill has the capability to execute shell commands (
python3) and write files to the local environment (SEO-AUDIT.md). - Sanitization: There is no evidence of sanitization or content filtering applied to the technical data retrieved from the external URL before the model processes it for the audit report.
Audit Metadata