Skills
Navigate
skills/venomous2/opencode-seo/local-seo/Gen Agent Trust Hub

local-seo

Pass

Audited by Gen Agent Trust Hub on Sep 26, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill automates SEO tasks by executing local Python scripts: scripts/dfs_client.py for search data, scripts/project_memory.py for configuration, scripts/schema_gen.py for generating JSON-LD, and scripts/report_publish.py for outputting branded reports.
  • [INDIRECT_PROMPT_INJECTION]: The skill interacts with untrusted external content, which is a necessary part of its SEO auditing function but presents a potential injection surface.
  • Ingestion points: Processes /sitemap.xml, raw HTML content from crawled landing pages, and search result data from DataForSEO.
  • Boundary markers: The instructions do not specify the use of delimiters or 'ignore' instructions for the data ingested from external URLs.
  • Capability inventory: The skill can execute local scripts and write generated reports to the file system.
  • Sanitization: The instructions do not describe explicit sanitization or validation of external web content before processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 26, 2026, 08:55 AM