SEO Autopilot Pro

• Outcome: Review
• Latest audit: May 29, 2026 at 9:33 PM UTC
• Version:
  1.0.0

Overview

This skill openly automates SEO publishing, but it can change a website repository and push to production without a clear human approval step.

Install only if you intentionally want an agent to modify and publish your website repository. Before enabling it, use a staging branch or pull requests instead of direct pushes to main, review generated diffs and content before deployment, restrict report sources to trusted inputs, limit the git credential or bot account it can use, and document how to disable the hook and undo changes.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Missing User Warnings

High

• Confidence: 96% confidence
• Finding: The skill is explicitly designed to generate code, commit changes, push to git, and trigger production deployment with no explicit user approval gate or impact warning. Because it also ingests externally generated reports and runs automatically via hooks, this creates a high-risk path for unintended or malicious content to be transformed into live production changes.

VirusTotal

66/66 vendors flagged this skill as clean.