ecommerce-technical-seo-audit
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard shell commands including
curl,grep,sed,diff, andcommto perform technical SEO checks. These commands are clearly defined in thereferences/checks.mdfile and are scoped to the primary purpose of auditing category and product pages. - [EXTERNAL_DOWNLOADS]: Downloads public HTML content,
sitemap.xml, androbots.txtfrom user-specified target sites usingcurlto evaluate crawlability and indexing status. - [DYNAMIC_EXECUTION]: Employs inline Python scripts via
python3 -cto process HTML text, calculate word counts, and join URLs. These scripts use standard libraries and follow static templates provided within the skill's reference files. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted HTML data from external websites, creating a potential attack surface.
- Ingestion points: External website content is fetched via
curlinreferences/checks.mdand piped into subsequent commands. - Boundary markers: The skill does not use explicit delimiters to separate external data from agent instructions, though the agent's actions are constrained by the provided workflow.
- Capability inventory: The skill can perform network reads (
curl), write to temporary files in/tmp/, and process data using Python. - Sanitization: The skill applies regex-based filtering (
re.sub) to strip potentially dangerous or irrelevant HTML tags like<script>,<style>, and navigation headers before calculating word counts, which reduces the risk of processing malicious instructions embedded in the site content.
Audit Metadata