seo-audit
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill performs SEO audits by fetching and analyzing content from external websites via tools like
web_fetchorcurl. This introduces a potential surface for indirect prompt injection, as malicious instructions could be embedded in the HTML or metadata of the site being audited to influence the agent's behavior during the analysis phase. - Ingestion points: Data from external URLs fetched for auditing purposes.
- Boundary markers: No explicit delimiters or instructions to ignore embedded commands are specified for the fetched content.
- Capability inventory: Primarily focused on reading web content and generating audit reports; no dangerous execution or network write capabilities are present in this skill.
- Sanitization: The skill notes that
web_fetchautomatically strips<script>tags, which mitigates some script-based injection vectors.
Audit Metadata