internal-linking
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local Python scripts to perform its core functions:
python scripts/dfs_client.pyis used to fetch ranking data for a domain.python scripts/report_publish.pyis used to convert markdown reports into HTML/PDF formats.- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external sources which could potentially contain malicious instructions.
- Ingestion points: Sitemaps, crawl exports, and content fetched via
webfetchfrom various site URLs. - Boundary markers: None identified in the skill instructions.
- Capability inventory: Web fetching (
webfetch) and local command execution via Python scripts. - Sanitization: No specific sanitization or filtering of the ingested content is described before it is processed for analysis.
Audit Metadata