ClawHub
Back to skill

Security audit

seo-hreflang

Security checks across malware telemetry and agentic risk

Overview

This skill provides international SEO and hreflang auditing guidance without hidden execution, persistence, or sensitive data handling.

Install only if you want hreflang and international SEO audit assistance. Review generated recommendations before applying them, especially cultural tone and localization defaults, because they may not match every brand, market, or audience.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (4)

Natural-Language Policy Violations

Medium
Confidence
88% confidence
Finding
The guidance requires title tags and meta descriptions to be localized and explicitly says they must not be English. This is a natural-language locale policy constraint presented as a mandatory rule, but the document does not offer any user choice or explain a justified region-specific compliance requirement.

Natural-Language Policy Violations

Medium
Confidence
86% confidence
Finding
The instruction 'Use "Sie" (formal you)' is a natural-language locale directive that mandates a specific linguistic register rather than offering it as an option based on brand voice or user preference. This can violate language/locale policy expectations because it forces a specific style without explicit opt-in or documented justification.

Natural-Language Policy Violations

Medium
Confidence
84% confidence
Finding
The phrase '"Vous" default' sets a mandatory default register for French-language output, which is a locale-specific policy choice presented without user opt-in. Even though an exception is mentioned for youth/casual brands, the instruction still prescribes a language style by default rather than offering a choice.

Natural-Language Policy Violations

Medium
Confidence
87% confidence
Finding
The statement 'Keigo (honorific language) expected in business' directs a specific language register for Japanese output as a default requirement. Because it does not explicitly offer user choice or note exceptions based on audience, brand, or communication channel, it can be considered a language/locale policy violation.

VirusTotal

62/62 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.