Batch submit websites to AI tool directories and SEO directories to earn backlinks. Use when: user says "submit site to directories", "SEO backlinks", "submi...
Security Analysis
medium confidenceThe skill generally does what it says (automated directory form submissions), but there are multiple implementation inconsistencies and a few risky behaviors (disabled SSL verification, placeholder/missing files, and potential for large-scale spam) that you should review before using.
Name/description align with the included scripts: Playwright-based form-filling and aiohttp checks for directories. The provided directories list and automation code match the claimed purpose. Minor mismatches: there is a scripts/submit_to_directory.py file that contains only '404: Not Found' (unused) and targets/README.md suggests a --target CLI option that the main script does not implement. These inconsistencies suggest sloppy packaging but not necessarily malicious intent.
SKILL.md instructs installing Playwright and running the provided scripts which is consistent. However, check_directory.py explicitly disables SSL verification (aiohttp request with ssl=False), which is unnecessary for simple directory detection and weakens transport security (allows MITM). The automation will programmatically fill and submit forms across many sites — this is coherent with the stated purpose but also enables mass unsolicited submissions / spam and may violate target sites' terms of service or trigger captchas/rate limits. The skill does not handle captchas, credentialed sites, or legal/terms checks, and it offers no safeguards beyond a small delay.
There is no registry install spec (instruction-only skill), and SKILL.md instructs the user to pip install playwright and run its installation step. That's expected for a Playwright-based tool. Nothing in the registry installs arbitrary third-party binaries, but following the SKILL.md will download Chromium via Playwright's installer — normal but networked.
The skill requests no environment variables or credentials and does not access system config paths. That is proportionate to its purpose. It still asks the user to supply site data (name, email, URL) at run time; no hidden credential requests were found.
always is false and the skill does not request persistent privileges or modify other skills or system-wide settings. It writes local JSON result files only. Autonomous invocation is allowed by default but not combined with other privileged requests.
Guidance
This skill appears to implement automated, browser-driven submission to many directories which matches its description, but there are some red flags you should consider before running it: - Transport security: check_directory.py disables SSL verification (ssl=False). Remove or change this before running to avoid MITM risk. - Packaging inconsistencies: a submit_to_directory.py file is just a '404' placeholder and the README references a --target option the main script doesn't accept. Expect to edit/fix CLI and file issues. - Abuse and legal risk: the tool automates mass submissions. Using it at scale can violate sites' terms of service, trigger captchas, get your IP blocked, or be considered spam. Only submit to sites where you have permission and comply with their rules. - Operational cautions: the scripts don't handle captchas, login flows, or multi-step submissions. They may produce partial results or require manual intervention. Review and test against a small, benign list first. - Safe execution: run the tool on an isolated machine or container, use your own contact email, throttle submissions, and inspect saved JSON results locally. Review and remove the ssl=False line, fix the CLI mismatches, and delete or replace placeholder files before trusting this skill. If you want higher confidence, ask the publisher for: corrected README/CLI, justification for ssl=False, and a cleaned package without placeholder files. If you cannot trust the source, prefer reimplementing the minimal functionality you need or use a vetted tool.
Latest Release
v1.0.0
Initial release — batch submit websites to AI tool and SEO directories to earn backlinks, with Playwright automation
More by @kennyzir
Published by @kennyzir on ClawHub
