pagerangers-seo
Pass
Audited by Gen Agent Trust Hub on May 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a standard CLI client for the PageRangers Monitoring API. It uses the Python standard library for network requests and does not exhibit any malicious behaviors.
- [CREDENTIALS_UNSAFE]: No hardcoded secrets or API tokens were found. The skill correctly guides users to store credentials in a local
~/.env.pagerangersfile, ensuring sensitive data is handled outside of the codebase. - [EXTERNAL_DOWNLOADS]: Network activity is restricted to the official PageRangers API domain (
api.pagerangers.com) for data retrieval. The skill does not download or execute arbitrary remote scripts. - [PROMPT_INJECTION]: The skill's instructions and activation triggers are consistent with its SEO purpose. There are no attempts to bypass safety filters or override agent behavior.
- [COMMAND_EXECUTION]: The hook script (
detect_credentials.py) is used purely for environment validation and user guidance. It does not perform any dangerous shell operations or unauthorized file access.
Audit Metadata