ClawHub

Seo Channel Strategy

Security checks across malware telemetry and agentic risk

Overview

This SEO planning skill is coherent and low-risk, though it may create local Markdown planning files when used.

Install this if you want help producing SEO strategy and keyword-planning documents. Before running it in an important workspace, confirm where it will write `seo-strategy.md`, `seo-keyword-plan.md`, `seo-content-pipeline.md`, and `seo-avoid-list.md`, and avoid overwriting existing work.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Vague Triggers

Medium
Confidence
88% confidence
Finding
The manifest uses broad activation phrases such as 'SEO', 'organic search', and 'keyword research', which are common in routine conversation and can cause the skill to trigger when the user did not explicitly request it. Unintended activation can lead to irrelevant guidance, unnecessary tool/file actions, and increased chance of the agent following this skill in the wrong context.

Missing User Warnings

Medium
Confidence
91% confidence
Finding
The skill instructs creation of files in the working directory but does not include a user-facing notice or confirmation before writing them. In an agent environment, silent workspace modification can overwrite user work, create confusing artifacts, or violate expectations about when the assistant is allowed to persist changes.

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The outputs section explicitly states that four markdown files will be created, but it does not warn the user about workspace modifications or obtain consent. Because the file creation is part of normal execution flow, this increases the likelihood of unapproved persistent changes whenever the skill is activated.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal