seo-analyzer
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
orthCLI tool to execute commands against external APIs (Tavily, Scrapegraph, Exa) for site mapping, web scraping, and search tasks. This behavior is consistent with the skill's stated purpose of SEO analysis. - [PROMPT_INJECTION]: The skill processes untrusted data from external websites via the
scrapegraphAPI inSKILL.md. This represents a surface for indirect prompt injection, where malicious instructions embedded in a target website's content could attempt to influence the agent's logic. - Ingestion points: Content is retrieved from external URLs using
orth api run scrapegraph /v1/smartscraper. - Boundary markers: No explicit delimiters or boundary markers are defined in the provided workflow to separate external content from system instructions.
- Capability inventory: The agent can execute further API calls via the
orthtool based on analysis results. - Sanitization: There is no evidence of sanitization or filtering of the scraped content before it is processed by the agent.
Audit Metadata