seo-content
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data retrieved from user-provided URLs which could contain malicious instructions designed to influence the agent's behavior.
- Ingestion points: The skill utilizes the
WebFetchtool to retrieve content from the URL passed via the[url]argument. - Boundary markers: The instructions do not specify the use of delimiters (e.g., XML tags or triple backticks) to separate the external content from the skill's own logic, nor do they include instructions to ignore commands embedded in the data.
- Capability inventory: The skill is configured with access to
Read,Grep,Glob,Bash, andWebFetchtools. - Sanitization: No sanitization, filtering, or validation processes are defined for the content retrieved from the external source before it is analyzed by the agent.
Audit Metadata