add-seo

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [Data Ingestion and Processing]: The skill ingests data from local configuration files (powerpages.config.json, package.json) and user-provided inputs (site URL, meta descriptions) to generate SEO assets like robots.txt and index.html. While this represents a standard surface for indirect prompt injection where untrusted data could influence file content, the skill includes explicit user approval steps in Phase 3 and post-generation validation scripts to ensure placeholders are correctly replaced.
  • [Automated Command Execution]: The skill utilizes shell commands for environment checks (check-version.js) and version control (git commit). These operations are restricted to the local project environment and the skill's own directory, following standard developer tool patterns for maintaining project history and verifying installation integrity.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 10:15 AM
Security Audit — agent-trust-hub — add-seo