seo-drift

Pass

Audited by Gen Agent Trust Hub on Sep 26, 2026

Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONPERSISTENCEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute several Python scripts located in a local scripts/ directory (e.g., watch.py, dfs_client.py, drift_store.py) to manage SEO data and generate reports.
  • [DATA_EXFILTRATION]: The skill performs network operations via dfs_client.py to fetch external rankings, backlinks, and brand mentions for the targeted domain. These operations connect to external SEO data sources to retrieve snapshots.
  • [PERSISTENCE]: The skill includes a 'schedule' command that generates the necessary strings for users to configure recurring tasks via system-level tools like cron (Linux/macOS) or Task Scheduler (Windows).
  • [INDIRECT_PROMPT_INJECTION]: The skill processes data from external websites (rankings and brand mentions). If these external sources contain malicious instructions, they could theoretically influence the agent's output during the interpretation phase.
  • Ingestion points: External SEO data and brand mentions are fetched through dfs_client.py.
  • Boundary markers: There are no explicit delimiters or instructions provided to the agent to disregard instructions embedded within the fetched SEO data.
  • Capability inventory: The skill has the capability to write files (reports), run local scripts, and transmit data via the console.
  • Sanitization: No specific filtering or sanitization of the external SEO content is documented.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 26, 2026, 08:55 AM