seo-content-optimization
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
curlandgrepto audit website metadata by fetching HTML content from various domains associated with the author, such asmagnus919.comandrdumesh.org. - [COMMAND_EXECUTION]: It utilizes the
ghost-clicommand-line tool to manage site settings, inject JSON-LD structured data, and update post metadata on Ghost CMS installations. - [EXTERNAL_DOWNLOADS]: The reference documentation describes installing the
llms-txtPython package viapipto handle the generation of LLM-friendly site context files. - [INDIRECT_PROMPT_INJECTION]: The skill demonstrates an attack surface for indirect prompt injection as it ingests untrusted HTML content from external websites.
- Ingestion points: Site pages and sitemaps are fetched using
curlinSKILL.mdto audit search visibility. - Boundary markers: None are present to delimit the external content from the agent's instructions, though the use of
grepfor specific tags limits the impact. - Capability inventory: The skill has the ability to execute shell commands (
curl,ghost-cli), perform network operations, and modify site content via the Ghost CMS management tools. - Sanitization: There is no explicit sanitization or filtering of the fetched HTML content before it is inspected by the agent.
Audit Metadata