Detects GEO/SEO soft articles, synthetic promotion pages, abnormal brand mention density, and low-credibility sources in external web content. Use when OpenC...

This skill appears to do what it says (scan web content for GEO/SEO signals) but has two important issues you should consider before installing or enabling it: 1) Optional AI review can send content (URL, excerpt, and static analysis) to an external service (zenmux.ai) when ZENMUX_API_KEY (and related ZENMUX_* / GEO_GUARD_* env vars) are set. Those env vars are not declared in the skill metadata or SKILL.md. Do not set an API key unless you are comfortable with the skill transmitting excerpts (and possibly snippets of local files) to that external service. If you need the AI review capability, review the ai_review implementation and confirm the exact payload and destination. 2) The SKILL.md report path (hardcoded /root/clawd/...) does not match the policy's {workspace}/output/... and the code's workspace resolution. Expect the reports to live under the agent workspace, not necessarily /root. Verify write locations if that matters for your environment. Recommendations: - If you will run scan-file on local files, do not enable --with-ai or set ZENMUX_API_KEY unless you explicitly want those files sent externally. - Ask the publisher to update SKILL.md and metadata to declare the optional env vars and to document what the AI review sends and to which host. - Audit the remainder of lib/audit.py (functions truncated in the provided files: combine_results, build_report, write_report) to confirm they don't call other external endpoints or leak credentials. - Consider running the skill in a restricted environment (no ZENMUX_API_KEY, network egress blocked or monitored) while you review behavior. Confidence is medium because the code is mostly visible and coherent for its stated purpose, but the undeclared external-AI integration and documentation mismatches raise non-trivial risks that need explicit user consent.

Type: OpenClaw Skill Name: geo-content-guard Version: 0.1.0 The geo-content-guard skill is a defensive tool designed to detect SEO/marketing manipulation in web content using regex-based heuristics and an optional AI review. It performs standard operations such as fetching URLs via urllib, reading local files for analysis, and sending excerpts to a configured AI proxy (zenmux.ai) if an API key is provided. No evidence of malicious intent, obfuscation, or unauthorized data exfiltration was found; the code's behavior aligns strictly with its documented purpose of filtering recommendation pollution.