Ahrefs Connection
v1.0.1Connect to Ahrefs API to retrieve real-time SEO data including backlinks, keyword metrics, domain analysis, rank tracking, and site audits for SEO insights.
⭐ 0· 647·1 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill's name and description claim Ahrefs API integration and the SKILL.md contains concrete API endpoints and workflows consistent with that purpose. However, the registry metadata does not declare the API credential (AHREFS_API_KEY) or a primary credential even though the runtime instructions require one. This is a documentation/metadata omission rather than a mismatch of capability.
Instruction Scope
SKILL.md confines runtime instructions to making HTTP calls to https://api.ahrefs.com/v3, parsing results, and presenting SEO insights. It does not instruct the agent to read unrelated files, access other credentials, or send data to unexpected endpoints. Error handling, rate-limit, and cost-awareness guidance are included.
Install Mechanism
There is no install spec and no code files — the skill is instruction-only. That minimizes on-disk risk; the agent will rely on network calls described in the SKILL.md.
Credentials
The skill legitimately requires an Ahrefs API key for its stated purpose and SKILL.md even suggests storing it in AHREFS_API_KEY. But the registry metadata lists no required environment variables or primary credential. The request for a single API key is proportionate to the functionality, but the missing metadata declaration reduces transparency and could confuse users.
Persistence & Privilege
The skill is not always: true and does not request elevated or persistent platform privileges. Autonomous invocation is allowed by default (normal for skills), but there are no signs of the skill attempting to modify other skills or system-wide agent settings.
Assessment
This skill appears to do what it says: call the Ahrefs API and return SEO data. Before installing or enabling it, note two practical points: (1) The SKILL.md expects you to provide an Ahrefs API key (it suggests AHREFS_API_KEY), but the registry metadata does not list any required environment variable — ask the publisher to update the metadata to declare the credential for transparency. (2) Because the skill will make real API calls with your key, create a dedicated API key for this integration, set limits (monthly or unit caps) if possible, and monitor usage to avoid unexpected costs or exfiltration of query results. Also weigh provenance: source/homepage are unknown in the registry — prefer skills from known publishers or verify the owner before granting access to your API key.Like a lobster shell, security has layers — review code before you run it.
latestvk978df2c74an09am7z0c6ex07x815js5
License
MIT-0
Free to use, modify, and redistribute. No attribution required.