SEO Ranker

What to consider before installing or providing keys: - Ask the publisher to clarify which API keys are mandatory versus optional. SKILL.md states only one summarize-model key is needed, but the registry metadata lists four model keys as required. Only give the single model key you plan to use (principle of least privilege). - Verify you trust clawhub and the upstream packages that will be installed via 'npx clawhub@latest'; installation will pull code from npm at runtime. If you need to audit code, request a packaged release or run installation in a sandbox first. - MATON_API_KEY and BRAVE_API_KEY are expected for the described features; do not supply unrelated cloud credentials. Consider creating scoped/test accounts or tokens with limited permissions for integration testing. - Be aware the skill may ask for an affiliate/referral URL for Semrush trials — that's promotional and not required for SEO functionality. Decide whether you want that behavior. - Because this skill is instruction-only (no inspectable code), prefer to run it in an isolated environment or request an explicit data-flow diagram showing which external endpoints receive content and which keys are transmitted. If the publisher can (1) correct the metadata to list only required keys, (2) document exact external endpoints the skill calls, and (3) provide an explicit install artifact or audited upstream package list, my confidence in the skill's coherence would increase.