faq-seo
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to mine questions from external, user-generated platforms like Reddit, Quora, and Google's 'People Also Ask' boxes. This data is untrusted and could potentially contain malicious instructions intended to influence the agent's behavior.
- Ingestion points: Web search results and social media platforms specified in the 'Phase 1: Question Mining' section of SKILL.md.
- Boundary markers: The skill does not define specific delimiters or instructions to ignore embedded commands within the gathered data.
- Capability inventory: The skill allows for the creation of markdown deliverables and the execution of a local Python script (
scripts/check-output.py) for content validation. No high-risk capabilities like network exfiltration or arbitrary code execution were found. - Sanitization: There are no explicit sanitization or validation steps for the content retrieved from external sources.
Audit Metadata