seo-analyzer
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill possesses an inherent attack surface for indirect prompt injection because it is designed to fetch and analyze content from untrusted external websites.
- Ingestion points: Website HTML, metadata, and scripts are processed using tools like
web_fetchandcurlas described in SKILL.md. - Boundary markers: The instructions do not define specific delimiters or guidelines to ignore potential instructions that might be embedded in the analyzed web content.
- Capability inventory: The skill utilizes network-enabled tools to perform its primary auditing functions.
- Sanitization: There is no explicit logic provided for sanitizing or filtering untrusted input before the agent processes it for the SEO report.
- [SAFE]: No malicious patterns, such as direct prompt injection, data exfiltration, or unauthorized command execution, were detected. The skill's behavior is consistent with its stated purpose as an SEO diagnostic tool.
Audit Metadata