seo-content-marketing-skills-suite
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external URLs during content audits, competitor analysis, and technical SEO checks. Malicious instructions placed on these external websites could potentially influence the agent's behavior.
- Ingestion points:
/content-audit,/technical-seo,/competitor-gap, and/page-speed-seocommands fetch content from user-provided URLs inSKILL.md. - Boundary markers: None explicitly defined to separate external site content from agent instructions.
- Capability inventory: The skill utilizes the agent's browsing, file reading (CSV), and content generation capabilities.
- Sanitization: No specific sanitization or filtering of external content is mentioned.
- [EXTERNAL_DOWNLOADS]: The installation instructions direct users to download and install the skill from a GitHub repository that is not identified as a trusted source.
- Evidence:
git clone https://github.com/JaguarPillage/r04-alirezarezvani-claude-code-skill-factory-seo.gitandcurl -L https://github.com/JaguarPillage/r04-alirezarezvani-claude-code-skill-factory-seo/archive/main.zipinSKILL.md.
Audit Metadata