Seo Content Brief

• Outcome: Review
• Latest audit: Sep 10, 2026 · 3:49 PM UTC
• Version: 0.1.5

Overview

The skill's SEO workflow is mostly coherent, but its setup instructions ask users to execute a mutable remote installer and optional unpinned installs, which need careful review before use.

Review the installer before running it, prefer a manual or pinned installation path with independent checksum or signature verification, and avoid the optional related-skill `npx` installs unless you can pin and audit the exact versions. Expect the skill to send search queries and extracted URLs through inference.sh-backed apps as part of normal SEO research.

A.I.G

Vulnerability Patterns

• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Insecure Dependencies: Introduces malicious components through unsafe dependency sources
• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally

Findings (2)

T03 · Remote Payload Retrieval and Execution

Error

• Location: SKILL.md:14

Finding

Remote Installer Is Downloaded and Executed Without Prior Verification

Content

View full analysis

Remediation

View remediation

T08 · Insecure Dependencies

Warning

• Location: SKILL.md:274

Finding

Related Skills Are Installed Through Unpinned Third-Party References

Content

View full analysis

Remediation

View remediation

SkillSpector

Vulnerability Patterns

• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration

Findings (6)

External Script Fetching

High

• Category: Supply Chain
• Confidence: 98% confidence

Finding

Piping a remotely fetched script directly into sh executes untrusted network content immediately, creating a classic supply-chain and remote code execution risk. Even with accompanying claims about checksum verification, the dangerous behavior occurs before the user can independently inspect or validate the script, and the SEO/content-brief context does not justify such a risky install pattern.

Content

Scanner excerpt · SKILL.md (reported line 14)May include surrounding context.

Quick Start

bash

curl -fsSL https://cli.inference.sh | sh && infsh login

# Research target keyword
infsh app run tavily/search-assistant --input '{

Vague Triggers

Medium

• Category: Not specified by scanner
• Confidence: 96% confidence

Finding

This markdown file declares many trigger phrases in the description, including generic terms like "content brief," "keyword research," "content strategy," and "content planning." These are broad enough to match ordinary user requests outside this specific skill, and the file does not provide exclusion conditions or tighter activation constraints.

Content

No source excerpt is available for this finding.

Rp1

Medium

• Category: MCP Rug Pull
• Confidence: 70% confidence

Finding

npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.

Content

No source excerpt is available for this finding.

Rp1

Medium

• Category: MCP Rug Pull
• Confidence: 70% confidence

Finding

npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.

Content

No source excerpt is available for this finding.

Rp1

Medium

• Category: MCP Rug Pull
• Confidence: 70% confidence

Finding

npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.

Content

No source excerpt is available for this finding.

Description-Behavior Mismatch

Low

• Category: Not specified by scanner
• Confidence: 77% confidence

Finding

The manifest describes the skill as focused on SEO content briefs, keyword research, SERP analysis, and content structure. The included workflow also instructs users to generate an infographic image, which is a content asset creation capability rather than a core content-briefing activity.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.