← 返回 Skills 市场

Akkualle SEO Audit

Name: Akkualle SEO Audit
Author: akkualle

作者 Akkualle · GitHub ↗ · v1.0.0 · MIT-0

cross-platform ⚠ suspicious

106

总下载

当前安装

版本数

在 OpenClaw 中安装

/install akkualle-seo

功能描述

Automatisches tägliches SEO-Monitoring und Content-Optimierung mit Keyword-Ranking, Meta-Description Checks und Thin-Content-Erkennung für akku-alle.de.

使用说明 (SKILL.md)

Akkualle SEO Plugin

Automatisches SEO-Monitoring und Content-Optimierung für akku-alle.de

Features

Tägliches SEO-Audit (via v9 API)
META_DESCRIPTION Checks (max 155 chars)
THIN_CONTENT Detection (min 500 Wörter)
Keyword-Ranking Tracking (GSC)
Automatische Content-Vorschläge

CLI Commands

# SEO Audit starten
python3 ~/.openclaw/skills/akkualle-seo/seo_audit.py

# Meta Descriptions fixen
python3 ~/.openclaw/skills/akkualle-seo/fix_meta.py

# Thin Content erweitern
python3 ~/.openclaw/skills/akkualle-seo/expand_content.py

API Integration

v9 API Endpoint: POST https://akku-alle.de/api/admin Secret: akkualle-johny-2026-geheim

Verfügbare Actions:

v9.health - Health Check
v9.seo.auditAll - SEO Audit
v9.content.gaps - Content Lücken finden
blog.update - Blog Posts aktualisieren

Cron Jobs

# Täglich um 06:00 SEO Audit
0 6 * * * python3 ~/.openclaw/skills/akkualle-seo/seo_audit.py

Monetarisierung

Dieser Skill kann auf ClawHub veröffentlicht werden:

Preis: 19€/Monat
Zielgruppe: E-Commerce, Affiliate-Seiten
USP: v9 API Integration + Auto-Fix

安全使用建议

This skill contains a hardcoded admin secret and will POST administrative actions (including blog.update) to akku-alle.de. Before installing: (1) Do not trust the provided secret — verify ownership of the target site and the authenticity of the skill author. (2) Confirm why no credentials are declared in the manifest while a v9 admin key is required. (3) Request the missing scripts (fix_meta.py, expand_content.py) and inspect them. (4) Inspect the skill_memory implementation at /root/.openclaw/workspace/tools to see what get_secret and log_action do (they can leak or store secrets). (5) Prefer running this in an isolated/test environment, and remove or rotate any hardcoded secret. If you don't control akku-alle.de or cannot verify the author, do not install.

功能分析

Type: OpenClaw Skill Name: akkualle-seo Version: 1.0.0 The skill bundle contains a hardcoded administrative API secret ('akkualle-johny-2026-geheim') in both `SKILL.md` and `seo_audit.py`, which is a significant security vulnerability. While the script's functionality for SEO auditing and blog updates on `akku-alle.de` aligns with its stated purpose, the inclusion of static credentials and the capability to modify remote content via an administrative endpoint are high-risk behaviors. No evidence of intentional data exfiltration or malicious intent against the host system was identified.

能力评估

⚠ Purpose & Capability

The skill's stated purpose is daily SEO monitoring and automated fixes for akku-alle.de, which plausibly requires an API. However, the SKILL.md and code expose a hardcoded admin secret and call high-privilege actions (e.g., blog.update). The manifest declares no credentials, yet the skill needs a v9 admin secret — that mismatch is unexplained and disproportionate.

⚠ Instruction Scope

SKILL.md instructs posting a plaintext secret to https://akku-alle.de/api/admin and scheduling cron jobs that run scripts. The README references fix_meta.py and expand_content.py that are not present in the bundle. The runtime code imports a skill_memory helper from /root/.openclaw/workspace/tools (outside the skill dir) to obtain secrets and log actions, introducing implicit external dependencies and access to agent memory that are not documented in the manifest.

ℹ Install Mechanism

There is no install spec (instruction-only), which minimizes installer risk. However, the package includes executable code (seo_audit.py) that will run network requests; there is no build/install step but the script expects external modules and a specific filesystem layout (/root/.openclaw/...), which may fail or hide behavior depending on runtime environment.

⚠ Credentials

The manifest declares no required credentials, yet the SKILL.md contains a clear-text admin secret and the code will use get_secret('v9') or fall back to that hardcoded secret. The skill therefore requires high-privilege credentials (admin API) while asking for none transparently. Accessing the agent's memory path (/root/.openclaw/workspace/tools) also broadens its access surface.

ℹ Persistence & Privilege

The skill is not marked always:true and does not claim to modify other skills or global config. It does, however, call log_action into skill memory and can be invoked autonomously (platform default). Autonomous invocation combined with admin API access increases blast radius, but autonomous invocation itself is the default and not alone a reason to block.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install akkualle-seo
安装完成后，直接呼叫该 Skill 的名称或使用 /akkualle-seo 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

Initial release - v9 API Integration, Memory System v2.0, automated SEO audits

元数据

Slug akkualle-seo

版本 1.0.0

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 1

常见问题