seo

Pass

Audited by Gen Agent Trust Hub on Mar 10, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: Orchestration scripts like generate_report.py and github_seo_report.py execute internal Python scripts via subprocess to aggregate data. This is a functional requirement for generating comprehensive SEO reports.
  • [EXTERNAL_DOWNLOADS]: Installation instructions include a curl | bash command from the author's own GitHub repository. This is recognized as a vendor-provided resource and follows the intended installation workflow.
  • [PROMPT_INJECTION]: The agent processes HTML and markdown content from user-provided URLs. While this creates an ingestion surface for indirect prompt injection, it is a necessary part of the skill's primary function (SEO analysis). The ingestion points include scripts/fetch_page.py and scripts/article_seo.py. Capabilities such as local script execution and reporting are present, but structural parsing via BeautifulSoup provides a layer of mitigation.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 10, 2026, 09:36 PM