Anti-SEO Researcher

Security checks across static analysis, malware telemetry, and agentic risk

Overview

The skill appears purpose-aligned for consumer research, but it can run included Python search scripts and keeps a local analysis cache.

This looks safe to install for its stated purpose if you are comfortable with web research automation. Before use, review that it may run included Python scripts, make web requests to search/fetch pages, write reports, and keep a local cache that you can delete if desired.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

#
ASI05: Unexpected Code Execution
Low
What this means

When invoked, the agent may run included Python scripts that perform web searches and process results.

Why it was flagged

The skill explicitly allows command execution and instructs the agent to run included Python scripts as a fallback search mechanism. This is disclosed and central to the research purpose, but it is still local code execution.

Skill content
allowed-tools:\n  - execute_command ... If web_search is NOT available ... python scripts/web_search_fallback.py "电竞椅 推荐 避坑 2025" --count 10
Recommendation

Install only if you are comfortable with the agent running the included scripts; keep command use limited to the provided, purpose-specific scripts.

#
ASI06: Memory and Context Poisoning
Low
What this means

Previously analyzed URLs or content-derived results may remain on disk and be reused in later research.

Why it was flagged

The analyzer stores AI analysis results in a persistent local JSON cache keyed by URL or content hash. This is useful for avoiding repeated analysis, but it retains research context across runs.

Skill content
cache_dir = os.path.join(script_dir, ".cache") ... self.cache_file = os.path.join(cache_dir, "ai_analysis_cache.json") ... self._cache[key] = {"result": result, "cached_at": datetime.now().isoformat()}
Recommendation

Clear the local cache if you do not want retention, and avoid using the skill for highly sensitive private research topics unless you are comfortable with local caching.