seo-machine

Pass

Audited by Gen Agent Trust Hub on Jul 14, 2026

Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection due to its core functionality of ingesting and processing untrusted data from external sources.
  • Ingestion points: references/api-stack-recipes.md describes workflows that fetch content from Reddit, X (Twitter), Hacker News, YouTube, TikTok, and GitHub READMEs using tools like Exa, Firecrawl, and the GitHub CLI.
  • Boundary markers: There are no explicit instructions or delimiters in the prompts to ensure the agent ignores potentially malicious instructions embedded in the scraped content (e.g., a competitor README containing a prompt injection payload).
  • Capability inventory: The agent has the capability to write executable code (React components, Rails controllers) and project documentation (docs/seo-machine.md), and it can execute local python scripts provided with the skill.
  • Sanitization: No evidence was found of sanitization, filtering, or validation of external content before it is interpolated into prompts for generating marketing payloads.
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute several bundled Python scripts to perform quality audits.
  • Evidence: SKILL.md and references/quality-bars.md require the execution of scripts/word_count.py, scripts/link_audit.py, and scripts/tech_audit.py to verify the integrity and SEO quality of generated pages.
  • Behavior: These scripts perform deterministic tasks like regex-based word counting, link verification, and HTTP requests to sitemaps and robots.txt files.
  • [EXTERNAL_DOWNLOADS]: The skill frequently fetches data from external, well-known technology services and platforms.
  • Evidence: The skill uses the Exa MCP and Firecrawl for SERP scraping and deep web searching, the gh CLI for retrieving GitHub repository data (READMEs and metadata), and the last30days skill for social media aggregation.
  • Context: These operations are fundamental to the skill's purpose of keyword research and competitive analysis. They target reputable service providers and public repository data.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 14, 2026, 02:06 PM
Security Audit — agent-trust-hub — seo-machine