Security audit
Security checks for vulnerabilities and agentic risk
The skill provides coherent launch-profile preparation and SEO management, with remote changes disclosed in its full instructions.
This skill can edit OpenQuok profiles and competitor settings and request analytics refreshes; it is not read-only. Specify the workspace, profiles, and competitors you want changed. Review the separately required CLI and openquok-core before providing credentials; directory submissions remain your action.
The overview and history commands align with reading cached SEO metrics. However, analytics:refresh requests an update, and analytics:competitors:add changes competitor-tracking configuration. These are additional analytics-management capabilities not covered by profile preparation, readiness inspection, or cached-metric reading.
The manifest at L004–L005 describes SEO functionality as reading cached directory SEO metrics. However, L076–L077 direct the agent to invoke a manual SEO refresh and add, remove, or update competitors, which changes remote state rather than merely reading cached data. These operations are also prescribed in the CLI workflow at L056–L057.
The manifest describes the SEO capability as reading cached directory metrics, but L48–L50 expose commands to add, remove, and update competitor records. These persistent configuration changes are distinct from preparing product profiles or inspecting listing readiness, and L69 also exposes their hosted MCP equivalents.
The manifest describes reading cached directory SEO metrics, but L155 invokes directory:analytics:refresh and L156 invokes directory:analytics:competitors:add. These operations refresh analytics and modify competitor configuration rather than merely retrieving cached metrics, extending the declared SEO scope.
No suspicious patterns detected.
