seo-keyword-research
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches research data from SerpApi, which is a well-known service for retrieving search engine results. These requests are necessary for the skill's primary functionality of trend analysis.
- [COMMAND_EXECUTION]: Employs Python and curl to execute its research workflow. The code is transparently provided in the skill files and is restricted to making API calls and formatting the returned keyword data.
- [SAFE]: Implements a caching mechanism that stores JSON data in the user's home directory (
~/.cache/seo-keyword-research). This is a standard practice for reducing latency and conserving API credits. - [PROMPT_INJECTION]: The skill processes external content from Google Trends which creates a surface for indirect prompt injection. However, this is inherent to the tool's purpose and the risk is minimal as the content is structured into informational outlines. Ingestion points: User-defined topics and SerpApi response data processed in
scripts/blog_seo_research.py. Boundary markers: None present. Capability inventory: Includes file system access for caching and network requests for API data. Sanitization: External keyword data is integrated directly into the markdown outline without specific filtering.
Audit Metadata