seo-analytics-auditor
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION] (SAFE): The skill utilizes the
npx lighthousecommand to perform website audits, which is a legitimate and standard diagnostic procedure. - [EXTERNAL_DOWNLOADS] (SAFE): The
npxcommand downloads thelighthousepackage from the official npm registry. As a Google-maintained tool, it is considered a trusted source. - [INDIRECT_PROMPT_INJECTION] (LOW): The skill audits external website content, presenting a surface for indirect prompt injection. 1. Ingestion points: Target URLs provided by the user. 2. Boundary markers: None. 3. Capability inventory:
npx lighthouseexecution and reading site metadata. 4. Sanitization: None.
Audit Metadata