programmatic-seo-pro
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [Indirect Prompt Injection] (LOW): The skill is designed to ingest and process large datasets from external sources (CSV, SQL databases, Headless CMS) to generate web content. This creates a surface for indirect prompt injection if the source data is attacker-controlled.
- Ingestion points: Data is fetched via
getCityDataand other ingestion logic described inreferences/data-automation.md. - Boundary markers: No explicit delimiter or instruction-guardrail pattern is provided in the implementation snippets.
- Capability inventory: The skill refers to external scripts (
scripts/generate-sitemap-index.tsandscripts/audit-duplicate-content.py) for processing generated output. - Sanitization: The skill includes a protocol for AI-driven sentiment analysis to ensure user-generated content in the dataset is safe.
- [Unverifiable Dependencies] (SAFE): The skill references standard development tools such as
redoclyand common frameworks likenext. No suspicious or untrusted remote scripts are executed. - [Data Exposure & Exfiltration] (SAFE): No hardcoded credentials, sensitive file access, or unauthorized network operations were detected. All network-related discussions are focused on standard architectural data fetching.
Audit Metadata