seo-technical
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were detected. The skill is composed of documentation, workflow instructions, and markdown templates for SEO auditing. It does not contain executable scripts, hardcoded credentials, or persistence mechanisms.
- [INDIRECT_PROMPT_INJECTION]: The skill framework involves the ingestion and analysis of external website data (HTML, robots.txt, sitemaps). While this is an inherent part of SEO auditing, it represents a potential surface for indirect prompt injection if the external content contains malicious instructions targeting the agent.
- Ingestion points: The skill instructions in
SKILL.mdandreferences/audit-template.mdspecify processing 'rendered HTML', 'robots.txt', 'sitemap.xml', and 'server logs' from external sources. - Boundary markers: No explicit boundary markers or delimiters are specified in the templates for processing these external data sources.
- Capability inventory: The skill is designed to produce a markdown audit report (
seo-technical-audit.md). It does not include tools for active network exfiltration or command execution based on the processed data. - Sanitization: No explicit sanitization or filtering of the external content is described in the workflow.
Audit Metadata