seo-competitor

Pass

Audited by Gen Agent Trust Hub on Oct 12, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external, untrusted sources such as Search Engine Results Pages (SERPs) and third-party SEO tool exports.
  • Ingestion points: The workflow identifies external data sources including priority keyword rankings, technical crawl results, and backlink exports (SKILL.md).
  • Boundary markers: The instructions do not define boundary markers or delimiters to separate external data from the agent's internal reasoning or instructions.
  • Capability inventory: The skill possesses the capability to write analysis results to local files, specifically competitive-analysis.md and accompanying spreadsheets (SKILL.md).
  • Sanitization: No instructions are provided to sanitize or validate the external data before it is processed or written to disk, creating a potential vector for indirect influence if a competitor site contains malicious instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 12, 2026, 12:09 AM