seo-competitor
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external, untrusted sources such as Search Engine Results Pages (SERPs) and third-party SEO tool exports.
- Ingestion points: The workflow identifies external data sources including priority keyword rankings, technical crawl results, and backlink exports (SKILL.md).
- Boundary markers: The instructions do not define boundary markers or delimiters to separate external data from the agent's internal reasoning or instructions.
- Capability inventory: The skill possesses the capability to write analysis results to local files, specifically
competitive-analysis.mdand accompanying spreadsheets (SKILL.md). - Sanitization: No instructions are provided to sanitize or validate the external data before it is processed or written to disk, creating a potential vector for indirect influence if a competitor site contains malicious instructions.
Audit Metadata