Security audit
Security checks for vulnerabilities and agentic risk
This SEO skill is a coherent website-audit helper with ordinary local file analysis and sitemap generation behavior.
Install this as an SEO helper for sites you intend to audit or edit. Review generated changes before publishing, choose the correct language and locale values for your content, and avoid pointing the sitemap output at an important existing file unless you intend to replace it.
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
Missing or Poor Title Tags:
<!-- Add unique, descriptive title to <head> -->
<title>Primary Keyword - Secondary Keyword | Brand Name</title>
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
<!-- Good -->
<img src="responsive-web-design-example.jpg"
alt="Responsive web design showing mobile, tablet, and desktop layouts">
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
The phrase "Any task related to search engine optimization for HTML/CSS websites" is broad and does not clearly constrain when the skill should or should not activate. This can overlap with many general website-editing or content tasks and may cause unintended invocation beyond the intended SEO workflow.
The Organization schema example sets "availableLanguage": "English", which is a natural-language locale constraint in a general guide. Because the document is not clearly limited to an English-only or region-specific use case, this can encourage users to publish a fixed language value without considering user or site locale needs.
The checklist presents <html lang="en"> as a requirement for page language declaration, which can be read as prescribing English rather than instructing authors to set the correct language for their content. Because the guidance does not explicitly say to choose the appropriate locale or language, it risks violating language/locale choice policy.
The script writes sitemap contents to the specified output path, which can overwrite an existing file. Although the CLI usage documents the output file argument, there is no explicit warning or confirmation at the point of the file write about overwriting user data.
No suspicious patterns detected.