seo-keyword
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill establishes a workflow for gathering data from untrusted external sources, presenting a surface for indirect prompt injection where malicious instructions could be embedded in the processed data.
- Ingestion points: The "Stage 1: Discover" section in
SKILL.mdidentifies sources including competitor keyword exports, customer reviews, and community content from platforms like Reddit and niche forums. - Boundary markers: The instructions do not define delimiters or provide specific prompts to ensure the agent ignores instructions that may be hidden within the gathered SEO data.
- Capability inventory: The workflow directs the agent to ingest these external inputs and generate structured outputs, including CSV spreadsheets and markdown content maps.
- Sanitization: The instructions do not include requirements for sanitizing, escaping, or validating the content retrieved from external sources before the agent processes it.
- [NO_CODE]: The skill is composed entirely of informational markdown files and templates. It does not ship with any scripts, binaries, or configuration files that execute code on the host system.
Audit Metadata