seo-keyword-mapper
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill includes a command to fetch a skill builder tool using
npxfrom the author's GitHub repository (github.com/peter-tu-zynkr/zynkr-skill-builder). This is a vendor-owned resource used for skill management. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external data provided by the user in the form of CSV or text exports from keyword tools.
- Ingestion points: Tool exports pasted by the user (SKILL.md).
- Boundary markers: The skill uses a structured checklist to guide data processing but does not explicitly define prompt boundary markers.
- Capability inventory: The skill uses the
google-workspaceMCP server to interact with Google Drive for saving output files. - Sanitization: The skill follows a specific
keyword-checklist.mdto ensure only required fields are extracted and organized, acting as a functional filter for the input data.
Audit Metadata