business-website-setup
Pass
Audited by Gen Agent Trust Hub on Oct 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill functions as a template generator for website architecture and SEO planning. It contains no executable code or external network requests. The instructions explicitly forbid requesting passwords, API keys, or Search Console tokens, and warn against handling PII such as customer lists.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user data regarding business operations to populate structured artifacts. Ingestion Points: User replies about business identity and services in Step 2 of the SKILL.md. Boundary Markers: Output is constrained to Markdown code blocks for CSV, SQL, and JSON formats. Capability Inventory: The skill produces structured text and references an external agent (@notion-manual-import). Sanitization: Explicit rules in Step 5 prevent the agent from inventing data and require prose to be kept outside machine-readable data fields.
Audit Metadata