30x-seo-hreflang
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external websites using the
WebFetchtool to perform international SEO audits. This creates a potential surface where an attacker could embed malicious instructions in a website's HTML (e.g., in metadata or hidden comments) to influence the agent's behavior.\n- Ingestion points: The skill instructions specify scanning websites for language indicators usingWebFetchas part of the audit process.\n- Boundary markers: There are no explicit instructions for the agent to use boundary markers or to treat the fetched website content as potentially adversarial data.\n- Capability inventory: The skill is configured to useWebFetch(network read) andRead(local file access) to analyze site configurations.\n- Sanitization: The instructions do not define any sanitization or validation steps for content retrieved from external URLs before it is processed by the agent.
Audit Metadata