Run a unified SEO and GEO audit for a website, page, or domain. Use when the user asks for a full SEO audit, GEO audit, AI visibility review, EEAT review, en...
Security Analysis
medium confidenceThe skill's stated purpose (SEO + GEO audits) is plausible, but there are inconsistent declarations about required credentials and binaries that could surprise users — verify before installing or supplying API keys.
The skill's name, README, and SKILL.md content align with an SEO/GEO audit workflow. Asking for SERPAPI search enrichment and optional local tooling (python3) is plausible for richer audits, but the registry metadata says 'Required env vars: none' while SKILL.md header declares SERPAPI_API_KEY as primaryEnv — that mismatch is unexpected.
SKILL.md instructions describe only observable site crawling, on-page checks, off-site visibility checks, and explicitly say not to claim access to Search Console, analytics, or private logs. There are no instructions to read unrelated system files or exfiltrate secrets in the documented runtime steps.
This is an instruction-only skill with no install spec or code files to execute; nothing would be downloaded or written to disk by an installer. That limits the execution surface compared with skills that install binaries.
Inconsistent declarations: the registry lists no required env vars, but SKILL.md header sets primaryEnv: SERPAPI_API_KEY and requires.env includes SERPAPI_API_KEY; the SKILL.md body then describes SERPAPI_API_KEY as optional. Similarly, SKILL.md lists 'python3' under required bins but the registry reported none. Requesting a SERPAPI API key is reasonable for optional search enrichment, but the contradictory metadata could cause unexpected credential requests or misconfiguration. Be cautious about providing any API keys without confirmation.
Flags show always: false and user-invocable: true; the skill does not request permanent/forced inclusion. There are no instructions to modify other skills or system-wide agent settings.
Guidance
This skill appears to be a legitimate SEO/GEO audit framework, but the package contains inconsistent metadata about what it actually requires. Before installing or supplying credentials: 1) Ask the author (or check the referenced GitHub repo) whether SERPAPI_API_KEY and python3 are truly optional or required at runtime. 2) Avoid pasting any unrelated secrets — only provide an API key if you intend the skill to perform search-result enrichment. 3) If you must test it, do so without credentials first and confirm the skill correctly marks items as 'Not verified' when external data is unavailable. 4) If you need higher assurance, request an explicit manifest update that matches SKILL.md and/or a sample run log showing how optional integrations are used.
Latest Release
v1.1.0
Add off-site mentions, platform-specific AI readiness, and a more explicit coverage map
Popular Skills
Published by @GEO-SEO on ClawHub
