broken-links
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill requires the agent to ingest and analyze rendered HTML and HTTP responses from external websites to resolve broken links. This ingestion of untrusted external data creates a surface for indirect prompt injection where malicious instructions could be embedded in the audited site's content. * Ingestion points: Rendered HTML and HTTP response auditing as specified in SKILL.md. * Boundary markers: No specific delimiters or safety instructions are provided to the agent for handling potentially malicious web content. * Capability inventory: Identifying and fixing links (file modification) and explaining SEO concepts. * Sanitization: No sanitization or validation steps are defined for the ingested HTML data.
- [NO_CODE]: The skill consists entirely of Markdown instructions and documentation. It does not include any executable scripts, binary files, or automated configuration changes, significantly reducing the direct execution risk.
Audit Metadata