seo-domain-analyzer
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external web sources (Semrush, Ahrefs, and Google Search results) via Apify actors and incorporates this content into the agent's context. This creates a surface for potential indirect prompt injection if the scraped web data contains malicious instructions.\n
- Ingestion points: External content is fetched in the
fetch_semrush_data,fetch_ahrefs_data, andcheck_keyword_rankingsfunctions withinscripts/analyze_domain.py.\n - Boundary markers: The script formats the retrieved data into structured JSON and Markdown reports, providing implicit structural delimiters.\n
- Capability inventory: The script performs network requests to the Apify API and has the capability to write the resulting analysis to the local file system.\n
- Sanitization: No specific sanitization or filtering logic is applied to the scraped content before it is returned to the agent context.
Audit Metadata