SEO Ranker

Performs end-to-end SEO audit and on-page optimization by analyzing live SERP, competitor content, backlink data, and generating actionable rewrite guidance.

What to consider before installing or providing keys: - Ask the publisher to clarify which API keys are mandatory versus optional. SKILL.md states only one summarize-model key is needed, but the registry metadata lists four model keys as required. Only give the single model key you plan to use (principle of least privilege). - Verify you trust clawhub and the upstream packages that will be installed via 'npx clawhub@latest'; installation will pull code from npm at runtime. If you need to audit code, request a packaged release or run installation in a sandbox first. - MATON_API_KEY and BRAVE_API_KEY are expected for the described features; do not supply unrelated cloud credentials. Consider creating scoped/test accounts or tokens with limited permissions for integration testing. - Be aware the skill may ask for an affiliate/referral URL for Semrush trials — that's promotional and not required for SEO functionality. Decide whether you want that behavior. - Because this skill is instruction-only (no inspectable code), prefer to run it in an isolated environment or request an explicit data-flow diagram showing which external endpoints receive content and which keys are transmitted. If the publisher can (1) correct the metadata to list only required keys, (2) document exact external endpoints the skill calls, and (3) provide an explicit install artifact or audited upstream package list, my confidence in the skill's coherence would increase.

Type: OpenClaw Skill Name: seo-ranker Version: 1.0.0 The OpenClaw skill 'seo-ranker' is largely benign, providing a structured approach to SEO auditing and optimization. However, the `SKILL.md` file contains instructions for the AI agent to ask users for their preferred affiliate/referral URL when discussing Semrush 14-day trials, and to prioritize such links if provided. This instruction, reinforced in `references/inspected-skills.md`, constitutes a form of prompt injection designed to influence the agent's interaction for a non-core, potentially commercial purpose (facilitating affiliate sign-ups), which deviates from a purely functional role and introduces a subtle, self-serving bias.