The Agent Skills Directory

[SAFE]: The skill provides informational SEO guidelines and a static analysis script for local project files. The script is restricted to reading and pattern matching structural tags (like and ) within the provided project directory. No suspicious network activity, credential harvesting, or privilege escalation patterns were found.
[INDIRECT_PROMPT_INJECTION]: The skill ingests data from local project files, which constitutes a potential attack surface. However, the risk is negligible due to the specific functionality: 1. Ingestion points: scripts/seo_checker.py reads content from local project files (.html, .jsx, .tsx). 2. Boundary markers: Absent; the script reads raw file content. 3. Capability inventory: The script performs only read and console output operations; no file-write, network, or shell execution capabilities are present in the skill's code. 4. Sanitization: Absent, but the script only extracts structural SEO tags and does not execute the data content.

seo-fundamentals