seo-local
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes content from a user-provided URL to perform SEO analysis. This presents a potential surface for indirect prompt injection if the targeted website contains malicious instructions designed to manipulate the agent's behavior during the audit process.
- Ingestion points: Target URL content provided via the
[url]argument. - Boundary markers: The instructions do not explicitly mandate the use of delimiters (e.g., XML tags or triple backticks) to isolate external content from the skill's logic.
- Capability inventory: The skill utilizes MCP tools (DataForSEO) and generates markdown reports on the local filesystem.
- Sanitization: No specific sanitization or filtering logic is defined for the external content before processing.
Audit Metadata