geo
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches content from user-specified URLs and several well-known services (such as YouTube, Reddit, Wikipedia, and LinkedIn) to assess brand visibility and SEO metrics. These operations are directly aligned with the skill's primary function of website auditing.
- [PROMPT_INJECTION]: The skill processes external, untrusted content from the web which introduces a surface for indirect prompt injection. Malicious instructions embedded in a target website's HTML or text could potentially influence the agent's behavior during the audit process.
- Ingestion points: External data enters the system through
scripts/fetch_page.pyandscripts/brand_scanner.py, which download content from remote URLs using therequestslibrary. - Boundary markers: The skill does not currently implement explicit delimiters or instructional warnings to prevent the agent from following natural language instructions found within the analyzed web content.
- Capability inventory: The skill possesses
BashandWritecapabilities, used for running analytical scripts and saving report files (e.g.,GEO-REPORT.pdf,llms.txt). - Sanitization: While
BeautifulSoupis utilized to parse HTML structure, the extracted text content is passed to the agent without filtering for potential adversarial prompts.
Audit Metadata