seo-audit
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install an external MCP connector from
https://connector.get-ryze.ai/mcp. This is a vendor-owned resource necessary for the skill's primary functionality of data retrieval. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data retrieved from Google Search Console and Google Analytics.
- Ingestion points: External data is ingested through search queries, page metadata, and referral traffic sources retrieved via the Ryze MCP tools in
SKILL.md. - Boundary markers: The instructions do not define specific delimiters for separating user-controlled data from system instructions.
- Capability inventory: The toolset is restricted to data retrieval (e.g.,
google_search_console__listSites,google_analytics__runRawReport). No file system access, arbitrary shell execution, or privilege escalation capabilities are present. - Sanitization: No specific sanitization or filtering logic is documented for the retrieved search query or analytics data.
Audit Metadata