programmatic-seo
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [Prompt Injection] (SAFE): No attempts to override agent behavior, bypass safety filters, or extract system prompts were detected. The instructions are purely focused on SEO strategy and best practices.
- [Data Exposure & Exfiltration] (SAFE): No hardcoded credentials, sensitive file access (like SSH keys or AWS configs), or network exfiltration patterns were found. The skill suggests reading a local project file (
.claude/product-marketing-context.md) to gain business context, which is standard for development-oriented agent skills. - [Remote Code Execution] (SAFE): There are no commands to download or execute external scripts, and no use of dynamic execution functions like
eval()orexec(). - [Persistence & Privilege Escalation] (SAFE): The skill does not contain instructions for modifying shell profiles, system services, or using administrative commands like
sudo. - [Obfuscation] (SAFE): No hidden or encoded content (Base64, zero-width characters, etc.) was found in the markdown files.
- [Indirect Prompt Injection] (SAFE): While the skill ingests external data from a context file, it does not have the capability to execute commands or perform network operations based on that data, limiting the risk surface to purely informational influence.
Audit Metadata