seo-programmatic
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external content, creating a vulnerability surface for indirect prompt injection.
- Ingestion points: The skill uses the
WebFetchtool to retrieve content from user-provided URLs for auditing purposes, as described in the 'Data Source Assessment' and 'Error Handling' sections. - Boundary markers: The instructions lack specifications for using delimiters or 'ignore embedded instructions' warnings when the agent processes the fetched content (e.g., website body, HTML comments, or data files).
- Capability inventory: The skill is configured with powerful tools including
Bash,Write, andWebFetch, which could be exploited if malicious instructions are encountered in the external content. - Sanitization: There are no instructions for the agent to sanitize, escape, or validate the content retrieved from external sources before it is analyzed or used to generate plans.
Audit Metadata