citation-harvesting
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill content is primarily educational and template-based, focusing on SEO and digital PR best practices.
- [COMMAND_EXECUTION]: The script
scripts/check-output.pyis a basic text-validation tool used to ensure deliverables contain necessary keywords. It performs read-only operations on specified files without network or system-altering capabilities. - [EXTERNAL_DOWNLOADS]: All external URLs point to reputable SEO industry websites (such as Google Search Central, Moz, and Ahrefs) or the vendor's official GitHub repository. These are recognized as safe and authoritative sources.
- [INDIRECT_PROMPT_INJECTION]: The skill describes processes for ingesting data from external source request platforms. While this represents a data ingestion surface, the instructions emphasize human-in-the-loop drafting and manual response strategy rather than automated execution, effectively mitigating indirect prompt injection risks.
Audit Metadata