geo-technical
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the Bash tool to run curl commands for retrieving website files and headers necessary for the SEO audit.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from external websites which creates a potential surface for indirect instructions. * Ingestion points: The skill fetches HTML and header data from external URLs provided by the user (found in references/details.md). * Boundary markers: The instructions do not define specific delimiters or security warnings to treat the fetched content as untrusted. * Capability inventory: The skill is permitted to use Bash for networking and Write for creating report files. * Sanitization: No sanitization or validation steps for the retrieved HTML content are specified in the provided files.
Audit Metadata