pseo-discovery
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary purpose is codebase and market research. It provides structured guidance for an agent to identify data schemas, API routes, and content types within a project to suggest SEO strategies.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses an indirect prompt injection attack surface because it processes untrusted data from the local codebase (e.g., JSON, CSV, MDX files) and external web content (via
WebSearchandWebFetch). While this is inherent to its discovery function, it is documented as a risk factor. - Ingestion points: Codebase files explored via
Read,Glob, andGreptools; external search results and web pages retrieved viaWebSearchandWebFetchtools. - Boundary markers: The instructions do not explicitly require the use of delimiters or 'ignore instructions' blocks when processing ingested data.
- Capability inventory: The skill utilizes
Bash,Read, andWebFetch, which allow for significant data interaction. - Sanitization: There is no mention of sanitizing or escaping the data retrieved from external sources before it is analyzed by the agent.
Audit Metadata