link-building

Pass

Audited by Gen Agent Trust Hub on Aug 26, 2026

Risk Level: SAFEPROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest external data from project-specific files, which represents a potential vector for indirect prompt injection.
  • Ingestion points: The instructions direct the agent to read .claude/project-context.md and .cursor/project-context.md to gather product and audience information (SKILL.md).
  • Boundary markers: Absent. The skill does not provide delimiters or instructions to ignore potential commands embedded within these context files.
  • Capability inventory: No high-risk capabilities such as network requests, filesystem writes, or subprocess executions are present in this skill.
  • Sanitization: Absent. There is no instruction to sanitize or validate the content retrieved from the context files.
  • [SAFE]: No obfuscation, hardcoded credentials, or unauthorized remote code execution patterns were found. The skill primarily serves as a strategic guide for SEO tasks.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 26, 2026, 06:06 AM