llmstxt
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
geocommand-line interface (CLI) via Bash to perform web audits and generate files. This involves executing commands that take external URLs as arguments and can write results to the local filesystem (e.g.,geo llmstxt <url> --generate --out llms.txt). - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from external websites that may contain malicious instructions designed to subvert AI behavior.
- Ingestion points: Data returned by the
geotool from crawled web pages, specifically within thefindings[].excerptandsignals[].detailfields. - Boundary markers: The skill contains a 'Response contract' that explicitly instructs the agent to treat these excerpts as untrusted quotations and to ignore any embedded commands or instructions.
- Capability inventory: Access to
Bashfor CLI execution and file writing, andReadfor file access. - Sanitization: The skill includes a dedicated detection mechanism for
content.instruction_likepatterns and mandates reporting them as findings rather than following them. - [EXTERNAL_DOWNLOADS]: The instructions recommend the installation and upgrade of the
seomator-geo-auditpackage viauvorpipx. This tool is a resource provided by the vendor to support the skill's functionality.
Audit Metadata