paw-mkt-seo
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external, untrusted sources such as live search engine results pages (SERPs) and competitor websites during its research phase.
- Ingestion points: Capability research workflows in
references/capability-research.md(Google SERP Analysis, SimilarWeb Competitor Intelligence, Answer The Public keyword research). - Boundary markers: The instructions do not specify delimiters or safety warnings to ignore instructions embedded in the external content being analyzed.
- Capability inventory: The skill utilizes
agent-browserfor automation and writes detailed reports and action plans to the local project directory (e.g.,./.pawbytes/marketing-suites/brands/). - Sanitization: There is no explicit requirement for the agent to sanitize or filter the retrieved web content before processing it.
- [EXTERNAL_DOWNLOADS]: The skill references and provides installation instructions for an external browser automation tool from a well-known service.
- Evidence:
references/shared-patterns.mdcontains instructions to fetch the tool:npx skills add https://github.com/vercel-labs/agent-browser --skill agent-browser. - [COMMAND_EXECUTION]: The skill uses local shell commands to execute its research and technical audit functions.
- Evidence:
references/capability-research.mddefines workflows usingagent-browserCLI commands for SERP checking and schema validation.references/shared-patterns.mdincludes shell scripts (tool-discovery.sh,chrome-profiles.sh) for environmental setup.
Audit Metadata