seo-content-marketing-skill-factory
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes content from external websites and search engine results to generate content audits and briefs, which creates a potential surface for indirect prompt injection attacks.
- Ingestion points: External domains and keywords analyzed by the
/content-audit,/technical-seo, and/competitor-gapcommands defined inSKILL.md. - Boundary markers: The documentation does not specify the use of delimiters or instructions for the agent to ignore potentially malicious directives embedded in the external content being audited.
- Capability inventory: The skill performs file system exports (CSV, JSON, Markdown) and interacts with various external SEO APIs (SerpAPI, Ahrefs, SEMRush).
- Sanitization: There are no mentioned mechanisms for sanitizing or validating the data ingested from external web crawls before it is used to influence the agent's output.
- [EXTERNAL_DOWNLOADS]: The skill's installation process requires cloning source code from an external, non-trusted GitHub repository (
JaguarPillage/r04-alirezarezvani-claude-code-skill-factory-seo.git). - [COMMAND_EXECUTION]: The integration section of the skill suggests using shell commands to pipe output to external tools, such as
csv-to-sheets, which involves executing system commands with content generated from external data.
Audit Metadata