seo-architecture
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill executes Python scripts from a directory path () resolved at runtime via the ${CLAUDE_PLUGIN_ROOT} environment variable or the .seo-suite-runtime.json configuration file. This dynamic path resolution is used for core audit tools.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data from sources such as crawler CSV exports and JSON-formatted site graphs.
- Ingestion points: Data is loaded from crawler-csv files and bundle/site-graph.json as specified in the SKILL.md and reference contracts.
- Boundary markers: There are no instructions for using delimiters or warnings to isolate ingested data from agent commands.
- Capability inventory: The skill possesses command execution capabilities through multiple Python subprocess calls for validation and site management.
- Sanitization: The process includes validation steps using scripts like validate_site_graph.py and validate_seo_findings.py to verify data structure.
- [COMMAND_EXECUTION]: The procedure involves running various Python-based CLI tools to normalize exports, validate evidence, and manage the site's markdown profile.
Audit Metadata