seo-machine
Pass
Audited by Gen Agent Trust Hub on Jul 14, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection due to its core functionality of ingesting and processing untrusted data from external sources.
- Ingestion points:
references/api-stack-recipes.mddescribes workflows that fetch content from Reddit, X (Twitter), Hacker News, YouTube, TikTok, and GitHub READMEs using tools like Exa, Firecrawl, and the GitHub CLI. - Boundary markers: There are no explicit instructions or delimiters in the prompts to ensure the agent ignores potentially malicious instructions embedded in the scraped content (e.g., a competitor README containing a prompt injection payload).
- Capability inventory: The agent has the capability to write executable code (React components, Rails controllers) and project documentation (
docs/seo-machine.md), and it can execute local python scripts provided with the skill. - Sanitization: No evidence was found of sanitization, filtering, or validation of external content before it is interpolated into prompts for generating marketing payloads.
- [COMMAND_EXECUTION]: The skill instructs the agent to execute several bundled Python scripts to perform quality audits.
- Evidence:
SKILL.mdandreferences/quality-bars.mdrequire the execution ofscripts/word_count.py,scripts/link_audit.py, andscripts/tech_audit.pyto verify the integrity and SEO quality of generated pages. - Behavior: These scripts perform deterministic tasks like regex-based word counting, link verification, and HTTP requests to sitemaps and robots.txt files.
- [EXTERNAL_DOWNLOADS]: The skill frequently fetches data from external, well-known technology services and platforms.
- Evidence: The skill uses the Exa MCP and Firecrawl for SERP scraping and deep web searching, the
ghCLI for retrieving GitHub repository data (READMEs and metadata), and thelast30daysskill for social media aggregation. - Context: These operations are fundamental to the skill's purpose of keyword research and competitive analysis. They target reputable service providers and public repository data.
Audit Metadata