30x-seo-cannibalization

Pass

Audited by Gen Agent Trust Hub on Sep 20, 2026

Risk Level: SAFE
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external website content and user-provided CSV reports, creating a surface for potential indirect prompt injection.
  • Ingestion points: The skill retrieves external data using the WebFetch tool and reads local files via the --gsc command-line argument.
  • Boundary markers: There are no explicit delimiters or instructions provided to the agent to distinguish between the skill's instructions and the content being analyzed.
  • Capability inventory: The skill is restricted to read-only operations (WebFetch, Read) and does not possess capabilities for file writing, system modification, or command execution.
  • Sanitization: No sanitization or filtering of the ingested content is specified in the detection logic.
  • [SAFE]: All components and instructions are consistent with the stated SEO analysis purpose. The skill does not contain any obfuscated code, credential exposure, or persistence mechanisms.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 20, 2026, 12:33 AM