skills/semrush/skills/serp-analysis/Gen Agent Trust Hub

serp-analysis

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is a legitimate tool for SEO analysis and contains no malicious code, obfuscation, or unauthorized data access patterns. It explicitly utilizes official Semrush authentication flows, avoiding the need for hardcoded API keys.
  • [EXTERNAL_DOWNLOADS]: The skill references official Semrush editorial articles and documentation for methodology. These are trusted vendor resources provided for guidance.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data, specifically top-10 search results and user-provided URLs.
  • Ingestion points: User-provided keywords, database locations, and external ranking URLs.
  • Boundary markers: Instructions require that Semrush data, manual observations, and model judgment remain "visibly separate" in the output.
  • Capability inventory: The skill uses discovery and report tools (keyword_research, organic_research, domain_overview) but lacks shell-execution or file-system write permissions.
  • Sanitization: The skill employs a structured evidence object to ensure that external data is handled as data rather than instructions, and requires labeling of data sources to maintain context.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 11:42 AM