seo-optimizer
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to crawl external websites (Phase 1) and analyze their content for technical SEO audits. This ingestion of untrusted data from the web represents a potential attack surface where malicious instructions embedded in a target site's HTML, meta tags, or hidden comments could influence the agent's behavior.
- Ingestion points: Website crawling phase using tools like Screaming Frog, Sitebulb, or custom scripts as defined in Phase 1 of the multi-phase process.
- Boundary markers: No specific delimiters or "ignore embedded instructions" warnings are provided to prevent the agent from obeying instructions found on external sites.
- Capability inventory: The skill identifies several capabilities including generating structured data (JSON-LD), implementing meta tags, and writing performance-optimizing CSS and JavaScript.
- Sanitization: The instructions do not specify any sanitization, escaping, or filtering of the external content before it is processed by the agent.
Audit Metadata