seo-onpage
Pass
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection due to how it processes external data.
- Ingestion points: The
Workflowsection inSKILL.md(steps 2 and 3) instructs the agent to render and inspect the HTML source of external URLs provided by the user. - Boundary markers: The instructions do not implement delimiters or provide 'ignore embedded instructions' warnings for the data being fetched and analyzed.
- Capability inventory: The skill is authorized to perform file system writes, specifically creating audit reports (e.g.,
seo-audit-[page-slug].md) in the project directory. - Sanitization: There is no mention of sanitizing or escaping the content retrieved from external sources before it is analyzed by the agent.
Audit Metadata