backlink-gap-analysis
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from third-party websites through SEO analysis tools.\n
- Ingestion points: In
SKILL.mdandreferences/sandbase-api-map.md, tools likedataforseo_v3_backlinks_anchors_liveanddataforseo_v3_backlinks_backlinks_liveare used to retrieve content from arbitrary external domains.\n - Boundary markers: Absent; there are no instructions for the agent to treat the retrieved strings strictly as data or to ignore embedded prompts.\n
- Capability inventory: The skill, as defined in
SKILL.md, is a read-only research assistant and does not have access to file-writing, command execution, or outreach tools.\n - Sanitization: Absent; the workflow does not include steps to sanitize or validate the data returned by the backlink API tools.\n- [NO_CODE]: The skill is composed solely of Markdown instructions and does not include any Python, Node.js, or shell scripts.
Audit Metadata