solo-seo-audit
Pass
Audited by Gen Agent Trust Hub on Feb 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to clone the
seo-clirepository fromhttps://github.com/fortunto2/seo-cli. This is a vendor-managed resource provided by the skill author. - [COMMAND_EXECUTION]: Utilizes the
Bashtool to perform git operations, set up a Python environment usinguv, and execute the downloaded CLI tool for page audits. - [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection when processing untrusted content from external websites.
- Ingestion points: Fetches HTML metadata,
robots.txt, andsitemap.xmlviaWebFetchandWebSearchtools. - Boundary markers: Absent. The skill does not use delimiters or instructions to ignore embedded commands in fetched data.
- Capability inventory: The agent can execute shell commands via
Bashand write files via theWritetool based on the analyzed content. - Sanitization: Absent. There is no validation or filtering of the external data before it is processed by the agent's reasoning steps.
Audit Metadata