skill-seo-quality
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests untrusted user content for SEO analysis, which could potentially contain malicious instructions designed to influence the agent's behavior.
- Ingestion points: Input content is accepted in various forms including text, file paths, and links as defined in SKILL.md.
- Boundary markers: The skill does not define specific delimiters or markers to isolate the untrusted user data from the agent's instructions.
- Capability inventory: The skill has the capability to perform file system write operations to the outputs/ directory.
- Sanitization: There is no evidence of input validation or content sanitization being applied to the ingested content.
- Remediation: Use clear delimiters (such as XML-style tags) around user-provided content and provide explicit instructions for the agent to treat the enclosed content as data only, ignoring any embedded commands.
Audit Metadata