Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
Seo Content Engine
v1.0.0End-to-end SEO content creation workflow. Researches keywords, analyzes search intent, generates optimized outlines, and produces draft content with on-page...
⭐ 0· 40·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
SKILL.md describes an end-to-end SEO workflow (keyword research, SERP analysis, outlines, drafts) and the skill requests no binaries, env vars, or installs — this is proportionate. However, the registry Owner ID in the provided metadata differs from the ownerId inside _meta.json, and the skill has no source or homepage listed; that inconsistency reduces provenance confidence.
Instruction Scope
Runtime instructions are limited to content strategy and writing guidance; they ask the user to paste seed topics, competitor URLs or existing content (user-supplied). There are no instructions to read local system files, environment variables, or to transmit data to unexpected endpoints.
Install Mechanism
No install spec and no code files (instruction-only). This minimizes on-disk execution risk — nothing is downloaded or installed by the skill itself.
Credentials
The skill declares no required env vars, no primary credential, and no config paths. It references external SEO tools (Ahrefs, SEMrush, Ubersuggest) only as suggested integrations, but it does not request their credentials.
Persistence & Privilege
The skill is not marked always:true and is user-invocable with normal autonomous invocation allowed. It does not request elevated or persistent system privileges.
What to consider before installing
This skill's content and instructions match its SEO purpose and it is low-risk technically because it is instruction-only. However: (1) the manifest ownerId inside _meta.json does not match the registry owner ID and there is no source or homepage — that makes provenance unclear, so avoid installing or using it in production without verifying the publisher; (2) the skill asks you to paste competitor URLs or existing content — do not paste confidential or proprietary content; (3) integrations mentioned (Ahrefs, SEMrush, etc.) would require separate credentials if you use them — only provide those to trusted tools; (4) because this is an instruction-only skill, most risk is about data you feed it and the trustworthiness of the publisher, not binary installation. If you want higher assurance, ask the publisher for a source repo or homepage and confirm the ownerId before proceeding.Like a lobster shell, security has layers — review code before you run it.
latestvk978yabp155n5kzscvmemmkdyx84411w
License
MIT-0
Free to use, modify, and redistribute. No attribution required.