seo-audit
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze content from external websites using fetching tools. This ingestion of untrusted data creates a surface where an attacker could embed malicious instructions in the HTML of an audited site to influence the agent's behavior.
- Ingestion points: External website HTML content retrieved via
web_fetchorcurlas part of the audit process. - Boundary markers: The instructions lack specific requirements to wrap external content in delimiters or include instructions for the agent to ignore embedded directives in the fetched data.
- Capability inventory: The skill environment involves network requests to external domains and file reading from local directories (e.g.,
.agents/product-marketing-context.md). - Sanitization: There are no instructions in the skill scripts or documentation for sanitizing or filtering the external content before it is processed by the agent.
Audit Metadata