information-architecture-seo
Pass
Audited by Gen Agent Trust Hub on Jul 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The SKILL.md file contains instructions for the agent to execute local Python scripts for validation and linting purposes. * Evidence: The Validation section specifies commands using python3 to run scripts located at $CODEX_HOME/skills/senior-skill-architect/scripts/lint_production_skill.py and $HOME/SKILL/plans/seo-llm-skill-cluster/scripts/lint_skill_cluster.py.
- [DATA_EXFILTRATION]: The skill possesses an indirect prompt injection surface (Category 8) as it processes untrusted external data which could influence its behavior. * Ingestion points: The skill reads semantic-core.yaml and entity-topic-map.yaml as source inputs. * Boundary markers: The instructions do not define explicit boundary markers or delimiters for these external files. * Capability inventory: The skill has the ability to execute shell commands (Python scripts) and write structured YAML data. * Sanitization: There is no evidence of sanitization or filtering of the content read from the source YAML files before it is used in the workflow.
Audit Metadata