seo-onpage
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze content from external URLs provided by the user, which introduces a potential surface for indirect prompt injection if the target page contains instructions designed to manipulate the AI agent.
- Ingestion points: The skill fetches and renders external HTML content as described in the workflow steps 2 and 3 of
SKILL.md. - Boundary markers: The instructions do not specify the use of delimiters or specific warnings to ignore instructions embedded within the fetched page content.
- Capability inventory: The skill possesses file-writing capabilities to generate audit reports (e.g.,
seo-audit-[page-slug].md) and uses browser/fetching tools to retrieve external data. - Sanitization: There are no mentions of sanitizing, filtering, or escaping the external content before it is processed by the agent.
Audit Metadata