seo-regression-validator

Pass

Audited by Gen Agent Trust Hub on Aug 9, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses a Python script (scripts/audit_static_seo.py) to perform SEO audits. This script uses standard libraries (urllib.request) to fetch URLs and pathlib to read local files. The operations are read-only and restricted to the defined audit logic.
  • [EXTERNAL_DOWNLOADS]: The skill fetches HTML content from user-provided URLs using urllib.request.urlopen. The User-Agent is explicitly set to seo-regression-validator/0.1. These fetches are the primary purpose of the skill and do not involve executing remote code or downloading executable artifacts.
  • [DATA_EXFILTRATION]: The skill reads HTML data but does not contain logic to exfiltrate sensitive local information. It explicitly warns against storing cookies, tokens, or private analytics in its reports. The only data sent over the network are standard HTTP GET requests to the targets being audited.
  • [PROMPT_INJECTION]: The SKILL.md and evals.json contain instructions to ensure the agent does not fabricate reports or claim success without evidence. There are no patterns suggesting attempts to bypass safety filters or override system instructions.
  • [CREDENTIALS_UNSAFE]: No hardcoded credentials were found. The skill documentation explicitly states that it does not own Search Console credentialed data and should not use credentials unless provided by the user for the specific task.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 9, 2026, 05:21 AM
Security Audit — agent-trust-hub — seo-regression-validator