Search Optimization Agent

PassAudited by ClawScan on May 10, 2026.

Overview

This is a purpose-aligned instruction-only SEO skill, but users should verify any claimed real API data and approve external SEO API or site-crawling actions.

This skill appears safe to install as an instruction-only SEO assistant. Before relying on it, confirm whether your OpenClaw environment actually has access to the named SEO APIs, approve any website crawl scope, and protect any third-party API keys or account credentials you choose to use.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

NoteHigh Confidence

ASI02: Tool Misuse and Exploitation

What this means

The agent may access and analyze public website pages as part of an SEO audit.

Why it was flagged

The skill instructs the agent to crawl a website for technical SEO auditing. This is purpose-aligned and includes a 100-page bound, but it still generates external traffic and should be user-approved for the intended domain.

Skill content

Agent:
  1. 爬取网站（最多 100 页）

Recommendation

Use it only for sites you own or are authorized to audit, and confirm the crawl scope before running an audit.

NoteMedium Confidence

ASI03: Identity and Privilege Abuse

What this means

If real provider data is used, the agent may need access to SEO service accounts or API quotas.

Why it was flagged

The skill names provider APIs that commonly require authenticated accounts or API keys, while the registry metadata declares no required credentials. The artifacts do not show credential capture or leakage, but users should understand any account access they grant.

Skill content

data_sources:
  - Google Keyword Planner API
  - Ahrefs API (备选)
  - SEMrush API (备选)
  - Google Trends API

Recommendation

Provide API credentials only through trusted platform mechanisms, use least-privilege keys where available, and avoid pasting long-lived secrets into chat.

NoteHigh Confidence

ASI09: Human-Agent Trust Exploitation

What this means

Users could over-trust SEO metrics or recommendations if the agent cannot actually fetch real provider data.

Why it was flagged

The skill claims real SEO API integration, but the reviewed artifact set is instruction-only with no code, install spec, credential declarations, or derived capability tags. This is not malicious by itself, but users should not assume returned metrics are verified API data unless the runtime has suitable tools.

Skill content

集成真实 SEO API 数据，不是泛泛而谈的建议。

Recommendation

Ask the agent to cite the data source and timestamp for keyword volumes, rankings, and competitor metrics, and verify important business decisions against the original SEO provider.