seo-audit
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized access attempts were identified in the skill files or scripts.
- [COMMAND_EXECUTION]: The skill includes a local analysis script
scripts/seo_checker.py. This script is a transparent tool using standard Python libraries to parse HTML and provide SEO scores. - [EXTERNAL_DOWNLOADS]: The
seo_checker.pyscript utilizesurllib.request.urlopento fetch HTML content from external URLs. This is a legitimate function for an SEO auditing tool and does not indicate exfiltration of sensitive user data. - [PROMPT_INJECTION]: Surface for Indirect Prompt Injection (Category 8). The skill processes untrusted HTML data from external sites. 1. Ingestion points: URL content or local files processed by
seo_checker.py. 2. Boundary markers: Absent in the prompt instructions. 3. Capability inventory: The agent can read local files and perform network requests via the provided script. 4. Sanitization: Absent; the script extracts text from various HTML tags which could contain adversarial instructions. The agent should be instructed to treat data from this tool as untrusted external content.
Audit Metadata