The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses the bash tool to run curl and jq commands to interact with SEO APIs. This is standard behavior for the tool's purpose.
[EXTERNAL_DOWNLOADS]: Retrieves data from well-known SEO service providers including SemRush, DataForSEO, and SerpAPI.
[INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted content from external search results and API responses.
Ingestion points: Search result snippets and 'People Also Ask' questions are retrieved from serpapi.com, api.semrush.com, and api.dataforseo.com via instructions in SKILL.md.
Boundary markers: No delimiters or isolation instructions are present to prevent the agent from following instructions embedded in the API data.
Capability inventory: The skill utilizes the bash tool, which could be exploited if malicious instructions are successfully injected.
Sanitization: No sanitization or content filtering is implemented for the external data.

keyword-research