seo-competitor-pages
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external competitor data, creating an attack surface where malicious instructions embedded in third-party websites could influence the agent's output.
- Ingestion points: Data enters the context via the
WebFetchtool when analyzing competitor URLs specified by the user or discovered during research. - Boundary markers: The instructions do not define explicit delimiters or include 'ignore embedded instructions' warnings for the data retrieved from external URLs.
- Capability inventory: The skill is configured with access to the
Bashshell and file system tools (Read,Grep,Glob), which increases the potential impact if the agent were to follow instructions found in fetched web content. - Sanitization: There are no explicit instructions for the agent to sanitize, escape, or filter the content retrieved from external sources before incorporating it into the final SEO pages.
Audit Metadata