SEO Analyzer by G0atbot

PassAudited by ClawScan on May 1, 2026.

Overview

SEO Analyzer looks like a benign SEO helper, but it will fetch websites and use search/API services, with minor credential, provenance, and marketing-messaging gaps to review.

This appears safe to use for basic SEO checks on public or authorized websites. Before installing, verify the publisher and pricing, understand whether a Brave Search API key is needed, and avoid submitting confidential keyword research or private/internal URLs unless you are comfortable with those details being sent to external web or search services.

Findings (5)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may contact external websites while analyzing them, including URLs that could be private or internal if the user provides them.

Why it was flagged

The helper fetches a user-supplied URL over HTTP/HTTPS for analysis. This is central to SEO checking, but it can make outbound requests to any URL the user or agent provides.

Skill content
const url = process.argv[2]; ... const html = await fetchPage(fullUrl);
Recommendation

Use it on public or authorized sites, and review target URLs before letting the agent fetch them.

What this means

Confidential campaign terms, competitor research, or unpublished URLs could be exposed to a search provider if entered.

Why it was flagged

Ranking and keyword features depend on external search/provider services, so analyzed domains, keywords, or topics may be sent outside the local environment.

Skill content
`web_search` - Search for rankings and keywords; Brave Search API (for keyword/ranking data)
Recommendation

Avoid entering sensitive keyword lists, private launch plans, or internal/staging URLs unless you are comfortable sharing them with the relevant provider.

What this means

A user may not realize an external API key or account access could be needed for some features.

Why it was flagged

The skill documentation indicates a purpose-aligned API dependency, while the registry requirements list no env vars or primary credential. This is a metadata/expectation gap rather than evidence of credential misuse.

Skill content
- Brave Search API (for keyword/ranking data)
Recommendation

If using a Brave Search API key, use a scoped key where possible and confirm how the agent will access it before use.

What this means

It may be harder to independently verify the publisher or update history before installing.

Why it was flagged

The listing provides limited provenance for the skill. The included source is visible and not obfuscated, but users have less external context for publisher identity or project origin.

Skill content
Source: unknown; Homepage: none
Recommendation

Review the included files and publisher trust signals before installation, especially if using it with API keys or sensitive URLs.

What this means

A user may misunderstand the cost or scope of the advertised SEO features.

Why it was flagged

The listing contains inconsistent cost messaging. This does not show unsafe agent behavior, but it could confuse users about what is free versus paid.

Skill content
## Pricing: $9 ... ## Our Advantage
- 80% of features, 0% cost
Recommendation

Verify the price and feature limits before purchase or installation.