geo

Pass

Audited by Gen Agent Trust Hub on Jul 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches content from user-specified URLs and several well-known services (such as YouTube, Reddit, Wikipedia, and LinkedIn) to assess brand visibility and SEO metrics. These operations are directly aligned with the skill's primary function of website auditing.
  • [PROMPT_INJECTION]: The skill processes external, untrusted content from the web which introduces a surface for indirect prompt injection. Malicious instructions embedded in a target website's HTML or text could potentially influence the agent's behavior during the audit process.
  • Ingestion points: External data enters the system through scripts/fetch_page.py and scripts/brand_scanner.py, which download content from remote URLs using the requests library.
  • Boundary markers: The skill does not currently implement explicit delimiters or instructional warnings to prevent the agent from following natural language instructions found within the analyzed web content.
  • Capability inventory: The skill possesses Bash and Write capabilities, used for running analytical scripts and saving report files (e.g., GEO-REPORT.pdf, llms.txt).
  • Sanitization: While BeautifulSoup is utilized to parse HTML structure, the extracted text content is passed to the agent without filtering for potential adversarial prompts.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 15, 2026, 12:53 PM
Security Audit — agent-trust-hub — geo