SEO Optimizer Pro
v1.0.7AI-powered SEO content analysis and optimization for improved Google ranking and visibility in emerging AI search platforms like ChatGPT and Claude.
⭐ 9· 2.6k·6 current·7 all-time
byvs@vedantsingh60
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
The skill's purpose (model-agnostic SEO/AEO optimizer) legitimately requires API keys for external AI providers and SDKs listed in requirements.txt and manifest; the provider-prefix → env var mapping in the code aligns with the stated multi-provider design. However the top-level registry metadata (earlier 'Requirements' section) incorrectly shows no required environment variables or primary credential, which contradicts the manifest and code that require at least one provider API key. This metadata inconsistency is a red flag for sloppy packaging or registry entry mistakes.
Instruction Scope
SKILL.md and README instruct local execution, require you to set the chosen provider API key in an environment variable, and explicitly state that content is sent only to the chosen AI provider. The runtime instructions do not request unrelated system files, broad environment access, or hidden endpoints. They do require network access to the chosen AI provider (explicitly documented).
Install Mechanism
This is instruction-only in the registry (no remote download/install step), and included files list standard PyPI SDKs in requirements.txt (anthropic, openai, google-generativeai, mistralai). No archive downloads, shorteners, or personal servers are used in the install spec. The README recommends installing only the SDK you need, which reduces attack surface.
Credentials
The code and manifest request many provider-specific API keys but only require the one corresponding to the model you choose — that is proportionate to a multi-provider tool. The concern is the registry's 'Required env vars: none' summary (metadata mismatch). Also some env var names (e.g., DASHSCOPE_API_KEY) and base_url mappings for OpenAI-compatible forks warrant review but are explainable by multi-provider compatibility.
Persistence & Privilege
The skill does not request persistent system privileges, does not set always:true, and claims to run locally and in-memory. It does not attempt to modify other skills or system configuration in the files reviewed.
What to consider before installing
This package appears to do what it says (model-agnostic SEO/AEO analysis) and needs one API key for whichever provider you choose. However: 1) The registry metadata incorrectly lists no required env vars while the manifest and code require provider API keys — treat that as an inconsistency and verify expectations before installing. 2) The skill sends your content to third‑party AI providers (Anthropic, OpenAI, Google, Mistral, etc.); do not submit sensitive or confidential content unless you have reviewed the chosen provider's retention and privacy policies. 3) Install only the SDK you need (pip install only the provider package) to reduce attack surface. 4) Confirm the source — the package references a GitHub repo and a UnisAI domain, but the registry 'Source: unknown' and 'Homepage: none' fields are inconsistent; inspect the referenced GitHub repo and the included seo_optimizer.py for any unexpected network calls or logging before using. 5) If you proceed, run it in an isolated environment (virtualenv/container), supply only the single provider API key required, and rotate keys if you later suspect misuse. If you want higher assurance, ask the publisher to fix the registry metadata and provide a canonical homepage or release tarball so you can verify integrity (signed release or published Git tag).Like a lobster shell, security has layers — review code before you run it.
aeovk97cgnbg6g5qy31yg18baphdbh80cevyai-optimizationvk97cgnbg6g5qy31yg18baphdbh80cevyai-searchvk97cgnbg6g5qy31yg18baphdbh80cevycontent-analysisvk97cgnbg6g5qy31yg18baphdbh80cevycontent-optimizationvk97cgnbg6g5qy31yg18baphdbh80cevycopywritingvk97cgnbg6g5qy31yg18baphdbh80cevykeyword-analysisvk97cgnbg6g5qy31yg18baphdbh80cevylatestvk97f9avsqqr2se9c5smb9jdhzs81zvtjmarketing-techvk97cgnbg6g5qy31yg18baphdbh80cevyreadabilityvk97cgnbg6g5qy31yg18baphdbh80cevyseovk97cgnbg6g5qy31yg18baphdbh80cevyseo-toolsvk97cgnbg6g5qy31yg18baphdbh80cevytechnical-seovk97cgnbg6g5qy31yg18baphdbh80cevy
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
