Seo Audit

• Outcome: Pass
• Latest audit: Jun 9, 2026 at 6:38 AM UTC
• Version:
  1.0.0

Overview

This is a coherent SEO audit skill whose scripts read local build output or fetch a user-provided site URL and do not show hidden persistence, credential use, or exfiltration.

Before installing, be aware that the skill can prompt an agent to inspect your built site output, run local audit scripts, fetch the live site URL you provide, and propose or make SEO-related source changes. Review the target directory/site before running it, and approve source edits when they are clear and intended.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 89% confidence
• Finding: The README advertises very broad trigger phrases such as 'audit this site's SEO' or 'help me improve SEO,' which are common user intents that can cause the skill to activate in situations beyond the author's likely expectations. Over-broad activation increases the chance of inappropriate tool use, accidental context capture, or interference with other skills and normal assistant behavior, especially because the skill claims it will automatically locate build artifacts, run audits, and make changes.

VirusTotal

64/64 vendors flagged this skill as clean.