seo-content-marketing-command-suite
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The installation process involves cloning code from a non-standard GitHub repository (
github.com/retrocenterspark24/r11-qdhenry-claude-command-suite-seo.git). - [EXTERNAL_DOWNLOADS]: The documentation instructs users to install external software (Screaming Frog) and unspecified dependencies via
npm installandpip install -r requirements.txtwithout providing version pins or integrity checks. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data from websites during SEO audits and competitor analysis, creating an attack surface where malicious content on a scanned site could influence the agent's behavior.
- Ingestion points: Website content and technical metadata accessed via the
/technical-seo,/content-audit, and/competitor-gapcommands as described inSKILL.md. - Boundary markers: None specified in the instructions to prevent the agent from following instructions embedded within the analyzed web content.
- Capability inventory: The skill uses
subprocess.run(Python),executeCommand(JavaScript), and shell execution in provided automation templates. - Sanitization: No evidence of sanitization or filtering of external content before processing is mentioned in the suite's documentation.
- [COMMAND_EXECUTION]: The skill provides several automation templates (Bash, Python, JavaScript) that use system commands and subprocesses to interact with the SEO suite, which could be misused if input parameters are not correctly handled.
Audit Metadata