broken-links

Pass

Audited by Gen Agent Trust Hub on Oct 7, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill requires the agent to ingest and analyze rendered HTML and HTTP responses from external websites to resolve broken links. This ingestion of untrusted external data creates a surface for indirect prompt injection where malicious instructions could be embedded in the audited site's content. * Ingestion points: Rendered HTML and HTTP response auditing as specified in SKILL.md. * Boundary markers: No specific delimiters or safety instructions are provided to the agent for handling potentially malicious web content. * Capability inventory: Identifying and fixing links (file modification) and explaining SEO concepts. * Sanitization: No sanitization or validation steps are defined for the ingested HTML data.
  • [NO_CODE]: The skill consists entirely of Markdown instructions and documentation. It does not include any executable scripts, binary files, or automated configuration changes, significantly reducing the direct execution risk.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 7, 2026, 10:57 PM