ecommerce-seo
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to perform SEO audits on online stores by ingesting and analyzing content from user-provided URLs. This creates a risk where malicious instructions could be embedded within the target website's HTML, metadata, or structured data to influence the agent's behavior.
- Ingestion points: The skill accepts a
store URLargument (e.g., product or category pages) to perform its diagnostic tasks. - Boundary markers: The provided instructions do not include explicit delimiters or warnings for the agent to ignore embedded instructions within the fetched external data.
- Capability inventory: The skill instructs the agent to follow a full SEO workflow defined in a separate file (
../../seo/ecommerce-seo/SKILL.md), which likely utilizes tools for web browsing, data extraction, and SEO analysis. - Sanitization: There is no evidence in the primary skill file of input validation or sanitization for the content retrieved from the external URLs.
Audit Metadata