seo-audit
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides a comprehensive and professional framework for SEO audits without any malicious instructions, obfuscated content, or unauthorized file access. It references established and trusted industry tools like Google Search Console, PageSpeed Insights, and Screaming Frog.
- [PROMPT_INJECTION]: The skill processes untrusted data from external websites, which represents an indirect prompt injection surface. * Ingestion points: External website content and HTML fetched via tools such as
web_fetchorcurlas part of the auditing process (referenced in SKILL.md). * Boundary markers: The instructions do not specify explicit delimiters or "ignore embedded instructions" warnings to separate untrusted site content from the agent's internal reasoning. * Capability inventory: The skill is primarily focused on text analysis and reporting; it does not include high-risk capabilities such as script generation, arbitrary code execution (eval/exec), file system writes, or outbound network operations to non-whitelisted domains. * Sanitization: There are no instructions provided for sanitizing or escaping content retrieved from external sites before it is processed by the agent.
Audit Metadata