30x-seo-geo-technical
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external websites, which is an inherent part of its SEO auditing function. This creates a surface for potential indirect prompt injection if an attacker-controlled website contains malicious instructions in its robots.txt or llms.txt files.\n
- Ingestion points: External
robots.txtandllms.txtfiles are fetched using theWebFetchtool.\n - Boundary markers: No specific delimiters or "ignore embedded instructions" directives are defined for the fetched content.\n
- Capability inventory: The skill's capabilities are restricted to fetching and reading content (
WebFetch,Read). It does not have access to tools for command execution, file writing, or network exfiltration.\n - Sanitization: The instructions do not specify any sanitization or validation logic for the external data before the agent processes it.
Audit Metadata