seo-demand-validator
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data from web search results and competitor websites to analyze SERP patterns.
- Ingestion points: External content is ingested via
WebSearchandWebFetchtool outputs as described inSKILL.md. - Boundary markers: The skill does not define specific delimiters or instructions to the agent to ignore embedded commands within the fetched web content.
- Capability inventory: The agent has access to
google-workspacetools and web navigation tools across its scripts. - Sanitization: No explicit sanitization or validation of the retrieved web content is specified before processing.
- [EXTERNAL_DOWNLOADS]: The skill includes an installation command that fetches resources from the author's GitHub repository.
- Evidence:
SKILL.mdcontains an installation instruction:npx skills add https://github.com/peter-tu-zynkr/zynkr-skill-builder --skill seo-demand-validator.
Audit Metadata