market-seo
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to run a local Python script
scripts/analyze_page.pyto analyze user-provided URLs. - [EXTERNAL_DOWNLOADS]: The skill fetches external site assets including
robots.txt,sitemap.xml, andllms.txtfrom remote domains for analysis. - [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection by processing untrusted data from external websites without sanitization.
- Ingestion points: External web content and metadata are ingested via the
analyze_page.pyscript and direct fetches as described inSKILL.md. - Boundary markers: Absent. There are no instructions or delimiters provided to ensure the agent ignores malicious instructions embedded within the fetched website data.
- Capability inventory: The skill possesses the ability to execute local scripts and write report files to the local filesystem.
- Sanitization: Absent. No filtering or sanitization of the external content is performed before processing.
Audit Metadata