entity-seo

Pass

Audited by Gen Agent Trust Hub on Sep 26, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data which could contain malicious instructions designed to influence the agent's behavior.
  • Ingestion points: The skill fetches the homepage, about page, and top pages via webfetch, and external keyword-related content via scripts/dfs_client.py.
  • Boundary markers: No explicit boundary markers or instructions to ignore embedded commands are present in the processing logic.
  • Capability inventory: The skill has the capability to execute local Python scripts (dfs_client.py, report_publish.py) and write files to the filesystem.
  • Sanitization: No sanitization or validation of the fetched external content is mentioned before it is processed by the agent.
  • [COMMAND_EXECUTION]: The skill relies on executing local Python scripts to perform its primary functions.
  • Evidence: The skill instructions include running python scripts/dfs_client.py with various arguments (ranked, serp, content) and python scripts/report_publish.py to generate deliverables.
  • Evidence: The output logic involves creating directories and writing files based on the SEO_REPORTS_DIR environment variable.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 26, 2026, 08:54 AM