seo-content-brief
Pass
Audited by Gen Agent Trust Hub on Mar 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the vendor's 'infsh' CLI tool to perform various tasks such as user authentication, keyword research, and SERP analysis.
- [EXTERNAL_DOWNLOADS]: Recommends the installation of additional functional modules from the vendor's repository using 'npx skills add'.
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface as it ingests untrusted data from external web sources.
- Ingestion points: Data returned from 'tavily/search-assistant', 'exa/search', and 'tavily/extract' is processed by the agent to generate content briefs.
- Boundary markers: No specific delimiters or safety instructions are defined to separate external data from system instructions.
- Capability inventory: The skill's execution environment is restricted to the 'infsh' command via the Bash tool as defined in the frontmatter.
- Sanitization: No explicit sanitization or filtering of external content is specified in the instruction file.
Audit Metadata