by 安全扫描
OpenClaw
可疑
high confidenceThe skill's documentation promises search/ranking/keyword features and browser rendering but the included code only performs a simple static HTML fetch-and-parse; the declared capabilities and requirements are inconsistent.
评估建议
The skill appears to be a simple static HTML SEO checker (the included JS fetches pages and analyzes markup), but its docs promise search-based ranking, keyword research, and browser-rendered SPA analysis that the code does not implement. Before installing: 1) Ask the publisher how keyword/ranking lookups and Brave Search API access are actually performed and why no API key is declared. 2) Treat the skill as incomplete or misleading — test it in a sandbox to confirm behavior. 3) If you need rank...详细分析 ▾
⚠ 用途与能力
SKILL.md promises keyword research, ranking checks (Brave Search API), competitor analysis, and JS-rendering via a browser. The bundled code (seo-analyzer.js) only fetches a page over HTTP(S) and performs static HTML parsing and basic heuristics. There is no code calling any search API, no Brave Search usage, and no browser automation. The skill therefore does not provide many of the advertised capabilities and is misleading about what it actually needs/does.
⚠ 指令范围
Runtime instructions reference tools (web_fetch, web_search, browser) and an external Brave Search API, but neither the SKILL.md nor the code provides real steps to obtain or use that API. The Node script only fetches target pages and prints analysis. Instructions giving the agent latitude to use web_search/browser are broader than what the shipped code implements — this grants the agent discretion to call platform search/browser tools that are outside the script's scope.
✓ 安装机制
No install spec and only a single small JS file are included. There are no downloads, external install URLs, or package installs that would persist arbitrary code to disk beyond the provided file. This is low risk from an installation mechanism perspective.
ℹ 凭证需求
The skill declares no required environment variables or credentials, and the code does not access any secrets. However SKILL.md lists a 'Brave Search API' requirement that is not declared in requires.env and not implemented in code — either the documentation is incorrect or the skill expects the agent/platform to provide that API key at runtime. That mismatch should be clarified before trusting ranking/keyword features.
✓ 持久化与权限
The skill does not request persistent/always-on privileges, does not modify other skills or system configuration, and does not declare any elevated privileges. default autonomous invocation is allowed (platform default) and is not by itself concerning here.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/14
SEO Analyzer Skill 1.0.0 – Initial Release - Analyze web pages for on-page SEO factors like meta tags, headings, and content structure. - Generate keyword suggestions and research based on topics. - Compare SEO metrics between two URLs for competitor analysis. - Conduct site audits to detect common technical SEO issues. - Check how pages rank for specific keywords using search. - Free alternative to tools like Ahrefs, SEMrush, and Moz for basic SEO tasks.
● 无害
安装命令
点击复制官方npx clawhub@latest install g0atbot-seo-analyzer
镜像加速npx clawhub@latest install g0atbot-seo-analyzer --registry https://cn.longxiaskill.com镜像同步中