programmatic-seo
Pass
Audited by Gen Agent Trust Hub on Mar 6, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill uses standard instructional language for SEO expertise. There are no attempts to override system prompts, bypass safety filters, or extract underlying instructions.
- [DATA_EXPOSURE]: No hardcoded credentials, API keys, or sensitive file paths were found. The skill references standard agent context files (
product-marketing-context.md) which is expected behavior for localized task context. - [REMOTE_CODE_EXECUTION]: There are no patterns involving external downloads, package installations, or remote script execution.
- [COMMAND_EXECUTION]: The skill does not perform any shell commands, subprocess spawning, or file system modifications.
- [OBFUSCATION]: No Base64, zero-width characters, or other encoding techniques were detected in the content.
- [INDIRECT_PROMPT_INJECTION]: While the skill processes user-provided keyword patterns and business data, it lacks the dangerous capabilities (network access, file writing, code execution) required to escalate an indirect injection into a high-severity incident. Evidence: 1. Ingestion points: user prompts and product-marketing-context.md. 2. Boundary markers: Not explicitly defined. 3. Capability inventory: Text and markdown generation only. 4. Sanitization: Not applicable for static strategy generation.
Audit Metadata