seo-rank-tracking
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest external data from SEO tools such as Ahrefs and Google Search Console, which can serve as an injection surface for instructions embedded in keyword metadata or report content. The skill has the capability to perform write operations by creating projects in Ahrefs Rank Tracker based on this data.
- Ingestion points: The skill reads existing ranked keywords from Ahrefs Site Explorer, transactional queries from Google Search Console, and strategic keywords from business priorities (SKILL.md).
- Boundary markers: There are no explicit instructions or delimiters defined to isolate the external keyword data or to warn the agent to ignore any embedded instructions within that data.
- Capability inventory: The skill specifies the creation of Ahrefs Rank Tracker projects using the Ahrefs MCP (SKILL.md, Step 5).
- Sanitization: No sanitization, validation, or filtering of the ingested keyword data is mentioned before it is processed and used to configure tracking projects.
Audit Metadata