entity-seo
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data which could contain malicious instructions designed to influence the agent's behavior.
- Ingestion points: The skill fetches the homepage, about page, and top pages via
webfetch, and external keyword-related content viascripts/dfs_client.py. - Boundary markers: No explicit boundary markers or instructions to ignore embedded commands are present in the processing logic.
- Capability inventory: The skill has the capability to execute local Python scripts (
dfs_client.py,report_publish.py) and write files to the filesystem. - Sanitization: No sanitization or validation of the fetched external content is mentioned before it is processed by the agent.
- [COMMAND_EXECUTION]: The skill relies on executing local Python scripts to perform its primary functions.
- Evidence: The skill instructions include running
python scripts/dfs_client.pywith various arguments (ranked,serp,content) andpython scripts/report_publish.pyto generate deliverables. - Evidence: The output logic involves creating directories and writing files based on the
SEO_REPORTS_DIRenvironment variable.
Audit Metadata