seo-brief-writer
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation includes an installation command
npx skills add https://github.com/peter-tu-zynkr/zynkr-skill-builder --skill seo-brief-writer. This command fetches code from the author's official GitHub repository to set up the skill environment. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted data from multiple external sources, creating a vulnerability surface for indirect prompt injection.
- Ingestion points: Reads reference articles, forum Q&A, expert opinions, and resolves
來源:hyperlinks found within Google Docs to pull in full transcripts (SKILL.md, Step 1). - Boundary markers: The instructions do not define clear delimiters or "ignore embedded instructions" warnings for the external content being processed.
- Capability inventory: The skill uses the
google-workspaceMCP for searching, reading, and managing Drive files, and can write output to new Drive documents. - Sanitization: There are no explicit instructions for the agent to sanitize, escape, or filter instructions that might be embedded in the transcript data or reference articles.
Audit Metadata