r16-voltagent-seo-content-marketing-agent-skills

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill's installation instructions require downloading code from an untrusted GitHub repository (github.com/Gravityaespot/r16-voltagent-awesome-agent-skills-seo). This introduces a dependency on external source code that hasn't been verified for safety.
  • [INDIRECT_PROMPT_INJECTION]: The skill analyzes data from user-provided URLs for audits and competitor research, creating a surface for indirect prompt injection attacks.
  • Ingestion points: Target URLs provided to /content-audit, /technical-seo, and /competitor-gap commands.
  • Boundary markers: No specific delimiters or safety warnings are provided to prevent the agent from executing instructions found within external site content.
  • Capability inventory: The skill uses network access for crawling, file writing for reports, and interactions with several external APIs (SERP, SEMrush, Ahrefs, OpenAI).
  • Sanitization: No sanitization or filtering of the fetched content is specified before the agent processes it.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 09:34 PM