seo-technical
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill audits external websites by fetching and processing their content, which introduces an indirect prompt injection surface where malicious site content could attempt to influence agent behavior.
- Ingestion points: Data is ingested from user-provided URLs through fetch_page.py, render_page.py, and sitemap_discovery.py as defined in SKILL.md.
- Boundary markers: The skill does not define specific delimiters or instructions to ignore embedded content within the analyzed pages.
- Capability inventory: The skill utilizes subprocess calls to internal Python scripts for SEO analysis, technology stack detection, and rendering.
- Sanitization: There is no explicit description of content sanitization or escaping before the data is processed by the agent.
- [COMMAND_EXECUTION]: The skill executes local analysis scripts located in the plugin root (e.g., sitemap_discovery.py, agentic_check.py) using a standardized command wrapper. These operations are restricted to the intended SEO audit functionality.
Audit Metadata