solo-seo-audit

Pass

Audited by Gen Agent Trust Hub on Feb 27, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the agent to clone the seo-cli repository from https://github.com/fortunto2/seo-cli. This is a vendor-managed resource provided by the skill author.
  • [COMMAND_EXECUTION]: Utilizes the Bash tool to perform git operations, set up a Python environment using uv, and execute the downloaded CLI tool for page audits.
  • [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection when processing untrusted content from external websites.
  • Ingestion points: Fetches HTML metadata, robots.txt, and sitemap.xml via WebFetch and WebSearch tools.
  • Boundary markers: Absent. The skill does not use delimiters or instructions to ignore embedded commands in fetched data.
  • Capability inventory: The agent can execute shell commands via Bash and write files via the Write tool based on the analyzed content.
  • Sanitization: Absent. There is no validation or filtering of the external data before it is processed by the agent's reasoning steps.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 27, 2026, 09:14 PM