30x-seo-hreflang

Pass

Audited by Gen Agent Trust Hub on Sep 20, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external websites using the WebFetch tool to perform international SEO audits. This creates a potential surface where an attacker could embed malicious instructions in a website's HTML (e.g., in metadata or hidden comments) to influence the agent's behavior.\n- Ingestion points: The skill instructions specify scanning websites for language indicators using WebFetch as part of the audit process.\n- Boundary markers: There are no explicit instructions for the agent to use boundary markers or to treat the fetched website content as potentially adversarial data.\n- Capability inventory: The skill is configured to use WebFetch (network read) and Read (local file access) to analyze site configurations.\n- Sanitization: The instructions do not define any sanitization or validation steps for content retrieved from external URLs before it is processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 20, 2026, 12:33 AM