30x-seo-plan
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by design. It retrieves data from external, untrusted sources (competitor websites) to perform analysis, which could contain malicious instructions designed to influence the agent's output files.
- Ingestion points: The
WebFetchtool is used in Step 2 (Competitor Analysis) ofSKILL.mdto analyze competitor content, keywords, and structure. - Boundary markers: There are no explicit instructions or delimiters in
SKILL.mddirecting the agent to ignore or isolate embedded instructions within the fetched web content. - Capability inventory: The skill has the capability to write multiple markdown files to the local file system (
SEO-STRATEGY.md,COMPETITOR-ANALYSIS.md,CONTENT-CALENDAR.md,IMPLEMENTATION-ROADMAP.md). - Sanitization: The instructions do not specify any validation, filtering, or escaping of the content retrieved via
WebFetchbefore it is processed or included in the output reports.
Audit Metadata