indexability-conflicts
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves fetching and processing data from external web sources, which creates a potential vector for indirect prompt injection where adversarial instructions hidden in website content could influence agent behavior.
- Ingestion points: The instructions in
SKILL.mdandreferences/rule.mddirect the agent to fetchrobots.txtfiles and page HTML from external URLs during the SEO audit. - Boundary markers: No specific delimiters or safety instructions are provided to the agent to isolate the fetched external content from its internal execution logic.
- Capability inventory: The skill utilizes network fetching capabilities and content parsing to evaluate SEO signals.
- Sanitization: There is no mention of sanitizing, filtering, or escaping the content retrieved from external web servers before it is processed by the agent.
Audit Metadata