audit
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a CLI tool named
seomator-geo-auditvia thegeocommand. It includes standard preflight checks to ensure version compatibility (e.g.,geo --version) and provides instructions for the agent to install or upgrade the tool usinguvorpipxif missing. - [INDIRECT_PROMPT_INJECTION]: The skill explicitly defines a security boundary for data ingested during the crawl. The instructions in
SKILL.mdmandate that the agent treatfindings[].excerptandsignals[].detail(which contain content from external websites) as untrusted quotations. It provides clear instructions to report any instruction-like patterns found in these excerpts as site findings rather than executing them. - [SAFE]: The skill uses
allowed-toolsto limit the agent's environment and provides a 'Response Contract' that prevents the agent from inventing data or performing unauthorized arithmetic, ensuring output fidelity.
Audit Metadata