Google Seo Assistant

Security checks across malware telemetry and agentic risk

Overview

This is a plain SEO guidance skill with a broad activation description but no code, hidden behavior, credentials, persistence, or sensitive system access.

Install this if you want SEO-focused help for audits, web copy, metadata, and search visibility questions. Be aware it may activate on broad website traffic or URL feedback requests, so users should phrase unrelated marketing or content tasks clearly if they do not want SEO-oriented guidance.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Confidence
93% confidence
Finding
The skill’s trigger criteria are extremely broad, including vague signals like any mention of website traffic, URLs, webpage content, or SEO-adjacent topics. In an agent environment, this can cause the skill to activate for many unrelated or only partially related requests, leading to incorrect routing, over-collection of user content, or the skill inappropriately steering conversations toward SEO guidance when another skill should handle the task.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal