The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill utilizes web_fetch and curl to retrieve content from external websites for auditing purposes. It also references well-known and trusted external services, including Google Search Console, PageSpeed Insights, and the Google Rich Results Test.
[PROMPT_INJECTION]: The skill possesses an attack surface for indirect prompt injection because it processes untrusted data from third-party websites during the audit process.
Ingestion points: Website HTML and metadata retrieved via web_fetch or curl (referenced in SKILL.md).
Boundary markers: The instructions do not define clear delimiters or specific directives for the agent to disregard potential commands found within the fetched website content.
Capability inventory: The agent uses web_fetch to acquire data for analysis.
Sanitization: There is no evidence of content sanitization, escaping, or filtering before the data is processed by the agent.

seo-audit