seo-plan

Pass

Audited by Gen Agent Trust Hub on Aug 10, 2026

Risk Level: SAFE
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external data from the web (via WebFetch) and external SEO APIs (via DataForSEO tools), which represents a surface for indirect prompt injection if external sites contain malicious instructions.
  • Ingestion points: Data fetched via WebFetch and DataForSEO MCP tools.
  • Boundary markers: Absent. The skill does not explicitly instruct the agent to ignore instructions embedded in the external SEO data.
  • Capability inventory: Bash, Write, Read, WebFetch, Grep, Glob (SKILL.md).
  • Sanitization: Absent. The skill relies on the agent's default processing of external content.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 10, 2026, 08:54 AM
Security Audit — agent-trust-hub — seo-plan