marketing-seo
Pass
Audited by Gen Agent Trust Hub on Apr 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches the
agent-browserdependency from Vercel Labs' official GitHub repository to perform live competitive research and SERP analysis. - [PROMPT_INJECTION]: The skill has a surface for indirect prompt injection as it is designed to ingest and process content from live, untrusted websites and search engine results.
- Ingestion points: Uses
agent-browser get text bodyto retrieve full page content from arbitrary URLs during SERP and competitor analysis (File:SKILL.md). - Boundary markers: No explicit delimiters or instructions to ignore embedded commands are used when processing the scraped data.
- Capability inventory: The agent can write various SEO deliverables (audits, briefs, schema files) to the local filesystem and capture screenshots (File:
SKILL.md). - Sanitization: No sanitization or validation of the fetched external content is defined before processing.
Audit Metadata