seo
Pass
Audited by Gen Agent Trust Hub on Mar 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Orchestration scripts like
generate_report.pyandgithub_seo_report.pyexecute internal Python scripts viasubprocessto aggregate data. This is a functional requirement for generating comprehensive SEO reports. - [EXTERNAL_DOWNLOADS]: Installation instructions include a
curl | bashcommand from the author's own GitHub repository. This is recognized as a vendor-provided resource and follows the intended installation workflow. - [PROMPT_INJECTION]: The agent processes HTML and markdown content from user-provided URLs. While this creates an ingestion surface for indirect prompt injection, it is a necessary part of the skill's primary function (SEO analysis). The ingestion points include
scripts/fetch_page.pyandscripts/article_seo.py. Capabilities such as local script execution and reporting are present, but structural parsing via BeautifulSoup provides a layer of mitigation.
Audit Metadata