ai-visibility-audit
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a set of shell commands in
references/checks.mdintended for website auditing. These commands utilize standard utilities includingcurl,grep,sed,dig, andpython3(specifically thejson.toolmodule) to process site metadata and structure. - [EXTERNAL_DOWNLOADS]: The audit workflow involves fetching data from remote websites using
curl. This includes retrievingrobots.txt, XML sitemaps, and page HTML to verify indexability and machine-readability. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external websites, which represents a potential attack surface for indirect prompt injection.
- Ingestion points: The skill fetches external website content, HTTP headers, and JSON-LD structured data via
curlas defined inreferences/checks.md. - Boundary markers: The provided scripts do not explicitly define delimiters to separate fetched content from agent instructions, though this is typical for modular diagnostic tools.
- Capability inventory: The skill utilizes shell execution for network requests (
curl,dig) and text processing (grep,sed,python3). - Sanitization: The skill employs
grep -oEandsedto isolate specific HTML tags and scripts, providing a level of filtering for the ingested data.
Audit Metadata