Security audit
Security checks for vulnerabilities and agentic risk
This is a coherent SEO content-briefing skill with disclosed web and SEO-tool research behavior and no executable code or persistence.
Before installing, be aware that this skill may use web research and available SEO provider tools to inspect target sites and competitors. Avoid providing confidential client information unless you have permission to use it, and review generated case-study details before publication.
The invocation phrases include very generic terms such as "outline for," "content plan," and "write a brief," which can match many ordinary writing or planning requests outside SEO briefing. This can cause the skill to activate in contexts where the user did not intend competitive SEO analysis, leading to scope hijacking, unnecessary data fetching, or inappropriate structured output.
The case study guidance normalizes including client situation and results while only suggesting anonymization 'if needed,' which can lead an agent to disclose identifiable client details, commercially sensitive information, or regulated personal data in generated briefs. In a content-generation skill, this increases the chance that users are encouraged to publish or request case studies that mishandle confidential information.
Throughout the templates, the document repeatedly states that FAQPage should not be added for Google visibility and that no AI or ranking benefit is confirmed (for example L021, L037, L070, L088, L100). The homepage line "FAQ (for GEO) | AI search visibility" directly conflicts with that documented position by asserting an AI-visibility purpose for FAQ content.
No suspicious patterns detected.
