seo-audit-orchestration
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [NO_CODE]: The skill package consists exclusively of Markdown documentation and report templates. It does not contain Python, Node.js, or shell scripts, nor does it include any executable binaries. All logic is expressed as natural language instructions for the agent.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow that ingests data from external SEO and analytics platforms, creating a surface for indirect prompt injection if those platforms return attacker-controlled content.
- Ingestion points: The workflow pulls data from Ahrefs (Site Explorer, Site Audit, Keywords Explorer, Content Explorer), Google Search Console, and web analytics tools (SKILL.md).
- Boundary markers: The instructions do not define specific delimiters or context isolation markers for the external data pulls.
- Capability inventory: The skill sequences sibling tools and integrated findings into a summary report; it has no internal capabilities for file system modification or network transmission outside of the agent's native environment.
- Sanitization: No explicit data sanitization or validation steps are provided in the orchestration guidelines.
- [SAFE]: Analysis of the instructions and templates revealed no evidence of obfuscation, prompt injection attempts, or malicious intent. The skill aligns with its stated purpose of SEO audit orchestration and follows industry-standard reporting practices.
Audit Metadata