backlink-analyzer

Pass

Audited by Gen Agent Trust Hub on Jul 30, 2026

Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADSNO_CODE
Full Analysis
  • [PROMPT_INJECTION]: Potential surface for indirect prompt injection. Ingestion points: The skill ingests backlink CSV files and domain URLs provided by users or external tools for analysis (SKILL.md). Boundary markers: No explicit delimiters or instructions are provided to the agent to treat external data as untrusted content. Capability inventory: The skill writes reports and summaries to the memory/monitoring/ directory and updates memory/open-loops.md (SKILL.md). Sanitization: The instructions do not define sanitization or validation protocols for the imported CSV data.
  • [EXTERNAL_DOWNLOADS]: The skill documentation includes installation commands using npx skills to fetch content from the vendor's remote repository. This aligns with the expected distribution model for the platform.
  • [NO_CODE]: The skill is implemented using markdown files and instructions only, with no executable code or scripts provided within the skill package.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 30, 2026, 09:27 AM
Security Audit — agent-trust-hub — backlink-analyzer