SEO Analyzer Pro

Analyze webpage SEO score based on title, meta description, H1 tags, and content length, providing detailed optimization recommendations.

Security Scan

The skill's code and runtime instructions are not fully consistent — the docs embed a seemingly sensitive API key and a payment claim, but the shipped code does not use them; this mismatch and a hardcoded key merit caution.

Purpose & Capability

Name and description (SEO analysis) match the code's behavior: handler.py fetches a URL and checks title, meta description, H1s, and content length to compute a score.

Instruction Scope

SKILL.md advertises an integration/API key and a per-call price (0.001 USDT) and even prints a key-like string, but the Python handler never uses any external API or payment call. The presence of a raw API key in documentation is inconsistent with the code and raises disclosure or misdirection concerns.

Install Mechanism

No install spec (instruction-only install) and no downloads; code is included as a single small Python file that performs HTTP fetches. This is low install risk.

Credentials

Registry metadata declares no required credentials or env vars, yet SKILL.md contains a hardcoded key string starting with 'sk_...' (looks like an API secret). Requesting or publishing a secret in the docs without using it is disproportionate and risky. No other unrelated environment access is requested in code.

Persistence & Privilege

Skill is not always-enabled, does not request elevated persistence, and does not modify other skills or system settings. It does perform outbound HTTP requests to target URLs (expected for this purpose).

What to consider before installing

Do not install or use this skill until the following are clarified or fixed: - Ask the author why SKILL.md contains a hardcoded API key (sk_...) and a price if the code does not call any external paid API. Treat that key as sensitive: if it's a real key, it should be revoked/rotated. - Confirm whether the skill is meant to bill users or call an external service. If so, the code should transparently show those network calls and how credentials are supplied (via secure env vars, not hardcoded in docs). - Verify the source/owner and prefer skills with a verifiable homepage or repository. The source is unknown and there's no homepage. - Be aware that the handler fetches arbitrary URLs via requests.get. If the agent runs on a network with internal services, this can enable SSRF (server-side request forgery). Only allow analyses of user-supplied, validated, or publicly accessible URLs. - If you decide to proceed, run the code in a sandboxed environment and inspect network traffic. Also rotate any exposed secrets referenced in the SKILL.md before reuse. If the author confirms the API key was included by mistake and removes it and the pricing claim (or implements payment transparently), the skill would be more coherent; until then treat it with caution.

SEO Analyzer

Analyze webpage SEO score and provide optimization recommendations.

Features

• Check title tag
• Check meta description
• Check H1 tags
• Calculate SEO score (0-100)
• Provide recommendations

Price

• 0.001 USDT per analysis

Usage

"Analyze SEO for https://example.com"
"Check SEO score of my website"
"SEO analysis for [URL]"

SEO Score Breakdown

• Title tag: 30 points
• Meta description: 30 points
• H1 tag: 20 points
• Content length: 20 points

Example Response

{
  "url": "https://example.com",
  "score": 80,
  "title": "Example Website",
  "description": "This is an example...",
  "h1_count": 1,
  "issues": [],
  "recommendations": ["Add more content"]
}

Integration

• API Key: sk_93c5ff38cc3e6112623d361fffcc5d1eb1b5844eac9c40043b57c0e08f91430e
• Price: 0.001 USDT per call