programmatic-seo-planner
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external sources which could contain malicious instructions designed to influence the agent's behavior.
- Ingestion points: Processes content from competitor websites via the
site-content-catalogscript and Reddit discussions via thereddit-scraperscript. - Boundary markers: Absent; the skill instructions do not specify delimiters or warnings for the agent to ignore instructions embedded in the scraped data.
- Capability inventory: The skill possesses file-writing capabilities (saving blueprints to the local filesystem) and network access (facilitated by sub-skills and keyword APIs).
- Sanitization: Absent; no explicit sanitization or filtering of the external content is defined before it is processed by the LLM.
- [EXTERNAL_DOWNLOADS]: The skill integrates with several well-known SEO service providers to fetch market data.
- Evidence: References official APIs for DataForSEO, Keywords Everywhere, SEMrush, and Ahrefs for keyword volume and difficulty lookups.
- [COMMAND_EXECUTION]: The skill orchestrates its workflow by executing local Python scripts belonging to other skills.
- Evidence: Invokes
python3 skills/site-content-catalog/scripts/catalog_site.pyandpython3 skills/reddit-scraper/scripts/scrape_reddit.pyto perform data gathering phases.
Audit Metadata