seo-keyword-research
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill correctly manages sensitive API credentials by utilizing environment variables (
SERPAPI_KEY), avoiding the risk of hardcoded secrets. - [EXTERNAL_DOWNLOADS]: The skill makes network requests to
serpapi.comto fetch trending keyword data. This is a well-known service consistent with the skill's primary purpose and does not represent a security risk. - [SAFE]: The provided Python script (
scripts/blog_seo_research.py) uses the standardrequestslibrary for communication and implements local caching in a standard directory (~/.cache) with appropriate path sanitization to prevent directory traversal. - [INDIRECT_PROMPT_INJECTION]: The skill ingests external data from the SerpApi and interpolates it into blog outlines. While this technically creates an attack surface where a malicious API response could influence the agent, the risk is low given the reputable nature of the data source. Ingestion points:
rq_dataandrt_datainscripts/blog_seo_research.py. Boundary markers: None. Capability inventory:Bash,Read. Sanitization: None.
Audit Metadata