link-building
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest external data from project-specific files, which represents a potential vector for indirect prompt injection.
- Ingestion points: The instructions direct the agent to read
.claude/project-context.mdand.cursor/project-context.mdto gather product and audience information (SKILL.md). - Boundary markers: Absent. The skill does not provide delimiters or instructions to ignore potential commands embedded within these context files.
- Capability inventory: No high-risk capabilities such as network requests, filesystem writes, or subprocess executions are present in this skill.
- Sanitization: Absent. There is no instruction to sanitize or validate the content retrieved from the context files.
- [SAFE]: No obfuscation, hardcoded credentials, or unauthorized remote code execution patterns were found. The skill primarily serves as a strategic guide for SEO tasks.
Audit Metadata