Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed SEO helper for hreflang and localization audits, with no evidence of hidden execution, persistence, or data exfiltration.
Before installing, understand that the skill can guide an agent to inspect user-provided URLs or local content directories for hreflang and localization issues. Treat its cultural and language-format recommendations as SEO heuristics that may need adjustment for your brand, audience, and actual target locales.
The manifest says to use the skill when the user says terms like "international SEO", "multi-language", or "language tags", which are broad phrases that can arise in many contexts beyond hreflang auditing or generation. The file does not provide exclusion conditions or negative examples to clarify when the skill should not activate.
The skill states that word count validation should enforce expectations like German being 25-35% longer than English and Japanese 10-25% shorter. This encodes locale-specific rules as normative behavior without indicating user choice, opt-in, or a clearly justified regional compliance constraint.
The guideline 'Use "Sie" (formal you)' is a natural-language locale policy constraint presented as a default requirement rather than an optional recommendation. This can force a specific language-register choice without user opt-in, which matches the policy category for language or locale violations.
The statement '"Vous" default' imposes a specific linguistic form by default for a broad locale grouping. Because it does not offer user choice or frame the selection as configurable guidance, it may violate the language/locale policy constraint.
The guidance repeatedly treats English as the required source language for translation audits, such as comparing other languages against an EN version and using English as the baseline for expected ratios. This can be a natural-language locale policy issue because it imposes a specific language workflow without stating that English is optional or that the guidance only applies to English-led sites.
The sample matrix requires columns for EN, DE, FR, ES, and JA, which can be read as prescribing those locales rather than treating them as examples. This may violate language/locale flexibility expectations unless the document explicitly says the language columns should be adapted to the audited site.
The validation rules direct the skill to compare content against the page's declared language and to flag formats that do not match that locale. This is a natural-language locale policy constraint, and the file does not indicate that users may choose or override locale behavior.
