social-metadata-hardening
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of documentation and reusable code snippets for SEO purposes.
- [COMMAND_EXECUTION]: Provides example shell commands using
curlfor auditing metadata and image availability. These are standard diagnostic tools and are used here for legitimate development purposes. - [PROMPT_INJECTION]: The skill processes user-provided content (titles, descriptions) to generate metadata. This presents an indirect prompt injection surface common to SEO tools.
- Ingestion points:
buildSocialMetadatafunction arguments in lib/socialMetadata.js. - Boundary markers: None present.
- Capability inventory: The skill code is used to return data objects for configuration; it does not invoke dangerous subprocesses or network operations itself.
- Sanitization: No explicit sanitization or escaping of input strings is demonstrated.
Audit Metadata