seo-page
Pass
Audited by Gen Agent Trust Hub on Aug 4, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill facilitates the ingestion of data from external URLs via the
WebFetchtool, creating a potential surface for indirect prompt injection attacks where malicious content on a page could attempt to subvert the agent's instructions. - Ingestion points: External HTML content is fetched using the
WebFetchtool from URLs provided in the[url]argument (SKILL.md). - Boundary markers: The skill lacks explicit instructions or delimiters to isolate untrusted content from the agent's primary instructions.
- Capability inventory: The execution environment includes access to tools for shell execution (
Bash) and network operations (WebFetch) as defined in the SKILL.md frontmatter. - Sanitization: There is no evidence of content validation or sanitization before the agent processes the retrieved data.
Audit Metadata