seo-hreflang
Pass
Audited by Gen Agent Trust Hub on Apr 14, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits vulnerability to indirect prompt injection (Category 8) due to the way it ingests and processes external data.
- Ingestion points: The skill uses the
WebFetchtool to retrieve content from user-provided URLs specified in the[url]argument. - Boundary markers: There are no instructions or delimiters defined to separate the data being analyzed from potential instructions embedded within the fetched HTML or XML files.
- Capability inventory: The skill has access to powerful tools including
Bash,WebFetch,Read,Grep, andGlob, which increases the potential impact of an injection attack. - Sanitization: No sanitization or validation of the fetched content is performed before the agent processes it for SEO validation.
Audit Metadata