competitor-gap
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external SEO tools (DataForSEO, Ahrefs, Semrush) and Google Search Console. This ingestion of untrusted external content represents a surface for indirect prompt injection if the retrieved data contains malicious instructions. \n
- Ingestion points: Data retrieved via
ranked_keywordsandrunRawSearchAnalyticstool calls (SKILL.md). \n - Boundary markers: The instructions do not specify delimiters or system-level instructions to ignore embedded commands within the keyword data. \n
- Capability inventory: The skill utilizes tools for data retrieval and analysis; it lacks capabilities for arbitrary shell execution, file system writes, or unauthorized network exfiltration. \n
- Sanitization: There are no explicit instructions for the agent to sanitize or filter the content of the retrieved keywords before processing. \n- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install a vendor-specific MCP connector from
https://connector.get-ryze.ai/mcp. This is an official resource provided by the skill author for the intended functionality and represents standard setup for the Ryze integration.
Audit Metadata