seo-content-marketing-commands
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes content from external websites during SEO audits and competitor analysis, which introduces a risk where malicious instructions on those sites could influence agent behavior. • Ingestion points: The technical-seo, content-audit, and competitor-gap commands fetch and process data from arbitrary external URLs in SKILL.md. • Boundary markers: The documentation does not specify the use of delimiters or instructions to ignore embedded commands in the fetched web content. • Capability inventory: The skill can perform network requests to various APIs, write report files to the local disk, and interact with the WordPress API to publish content. • Sanitization: No explicit sanitization or filtering of external content is described.
- [EXTERNAL_DOWNLOADS]: The installation instructions direct users to clone a repository from an unverified GitHub user (Plateeocondense), which is outside the known scope of the skill author (reason-machines).
Audit Metadata