seo-drift
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONPERSISTENCEINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute several Python scripts located in a local scripts/ directory (e.g., watch.py, dfs_client.py, drift_store.py) to manage SEO data and generate reports.
- [DATA_EXFILTRATION]: The skill performs network operations via dfs_client.py to fetch external rankings, backlinks, and brand mentions for the targeted domain. These operations connect to external SEO data sources to retrieve snapshots.
- [PERSISTENCE]: The skill includes a 'schedule' command that generates the necessary strings for users to configure recurring tasks via system-level tools like cron (Linux/macOS) or Task Scheduler (Windows).
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external websites (rankings and brand mentions). If these external sources contain malicious instructions, they could theoretically influence the agent's output during the interpretation phase.
- Ingestion points: External SEO data and brand mentions are fetched through dfs_client.py.
- Boundary markers: There are no explicit delimiters or instructions provided to the agent to disregard instructions embedded within the fetched SEO data.
- Capability inventory: The skill has the capability to write files (reports), run local scripts, and transmit data via the console.
- Sanitization: No specific filtering or sanitization of the external SEO content is documented.
Audit Metadata