seo-question-miner
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides an installation command
npx skills add https://github.com/peter-tu-zynkr/zynkr-skill-builder --skill seo-question-minerthat fetches content from a repository owned by the skill's author. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted data from external sources, creating a surface for indirect prompt injection.
- Ingestion points: Reads persona data from
SEO_PACKET(provided by a previous skill) and optionally searches for and reads content from Google Drive using thegoogle-workspaceMCP server. - Boundary markers: None; the skill does not define specific delimiters or instructions to ignore embedded commands within the ingested content.
- Capability inventory: The skill uses the
google-workspaceMCP server for searching drive files and has the capability to write output to the working subfolder. - Sanitization: There is no mention of sanitizing, validating, or filtering the content retrieved from external sources before processing.
Audit Metadata