seo-rank
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to run various shell commands including
curl,grep,sed,sort, anduniqto analyze website structure, headers, and metadata. These commands are scoped to technical SEO analysis of target URLs or local source files. - [EXTERNAL_DOWNLOADS]: The skill utilizes
npxto execute external auditing tools. lighthouse: A well-known performance and SEO auditing utility provided by Google.structured-data-testing-tool: A standard utility for validating JSON-LD schema markup.- [INDIRECT_PROMPT_INJECTION]: The skill fetches and analyzes content from external websites and local codebases, creating a potential surface for indirect prompt injection.
- Ingestion points: External site content is retrieved via
curlcommands, and local source code is read usinggrepwithin thesrc/directory. - Boundary markers: The skill does not define specific delimiters or instructions for the agent to ignore embedded commands within the content it audits.
- Capability inventory: The skill has access to shell execution (
curl,npx,grep) and file system reads. - Sanitization: There is no evidence of explicit content sanitization or filtering applied to external data before analysis.
Audit Metadata