seo-technical
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process and analyze untrusted data from external sources, which creates a vulnerability surface for indirect prompt injection.
- Ingestion points: The agent is instructed to read external website content, including rendered HTML, robots.txt files, and XML sitemaps, as specified in the 'Workflow' and 'Required inputs' sections of SKILL.md.
- Boundary markers: The instructions lack explicit boundary markers or delimiters to separate external site content from the agent's internal reasoning or report generation instructions.
- Capability inventory: The skill's capabilities are limited to reading web content and writing audit reports (markdown) and redirect maps (CSV). It does not contain instructions for arbitrary command execution, sensitive file system access, or network operations outside of its intended crawling function.
- Sanitization: There is no mention of sanitizing, filtering, or escaping content retrieved from external URLs before processing it.
- [NO_CODE]: The skill consists entirely of Markdown instruction files and reference templates. It does not include any Python scripts, Node.js modules, shell scripts, or binary executables, significantly reducing the risk of direct malicious code execution.
Audit Metadata