← Back to Skills Marketplace
adamhjort

Seo Autopilot

by adamhjort · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
2699
Downloads
1
Stars
17
Active Installs
1
Versions
Install in OpenClaw
/install seo-autopilot
Description
Run local SEO autopilot for boll-koll.se or hyresbyte.se and return PR link plus summary.
README (SKILL.md)

seo-autopilot

Usage (WhatsApp / chat)

  • seo
  • seo boll-koll.se
  • seo hyresbyte.se

Default site: boll-koll.se

Safety

Only allow: boll-koll.se, hyresbyte.se
Never run arbitrary commands. Only run:

  • scripts/run.sh \x3Csite>

Behavior

  1. Parse site from the message, default to boll-koll.se.
  2. Refuse if site is not in allowlist.
  3. Run: scripts/run.sh \x3Csite>
  4. Extract PR url from stdout (line starting with "PR:").
  5. If SEO_REPORT.md exists in the repo, include the top 3 findings in the reply.
Usage Guidance
Do not install or run this skill until you verify the origin and contents of the 'seo-autopilot' program it calls. Ask the author: (1) where does the 'seo-autopilot' binary come from (official repo/release URL and version)? (2) provide an install spec or include source code and a reproducible build, plus checksums/signature for any binaries. If you must test it, run inside a tightly sandboxed environment (isolated container) and inspect what the 'seo-autopilot' binary does (network endpoints, file accesses). Also clarify how SEO_REPORT.md is supposed to be read (the script does not read it) and restrict exec permissions so the agent cannot run arbitrary commands beyond scripts/run.sh.
Capability Analysis
Type: OpenClaw Skill Name: seo-autopilot Version: 1.0.0 The skill bundle is classified as benign. It explicitly declares the use of the 'exec' tool, but implements robust input validation for the 'site' argument in both the SKILL.md instructions and the scripts/run.sh script. The script only executes a specific external command, 'seo-autopilot', with the strictly validated input. There is no evidence of data exfiltration, persistence, arbitrary command execution, or malicious prompt injection. File access for 'SEO_REPORT.md' is explicitly stated and aligns with the skill's purpose.
Capability Assessment
Purpose & Capability
Name/description match the included script's intent: run an SEO tool for two allowlisted sites and return a PR link. However, the skill depends on an external 'seo-autopilot' CLI binary that is not declared in requirements or an install spec. Requiring a host-provided binary without documenting it is disproportionate and unclear.
Instruction Scope
SKILL.md explicitly restricts actions to running scripts/run.sh <site> and to the two allowlisted sites, which is good. But SKILL.md also says the agent should include the top 3 findings from SEO_REPORT.md if it exists — there is no code that reads that file, and the allowed-tools list includes exec which could be used to read arbitrary files if the agent deviates. The script itself only runs an external program and echoes its output; the agent would need to run extra commands to implement the SEO_REPORT.md behavior, which is an inconsistency.
Install Mechanism
There is no install spec. The provided script calls an external 'seo-autopilot' program (seo-autopilot "$SITE") which is neither provided nor installed by the skill. This reliance on an undeclared binary is a high-risk omission: the execution will succeed only if a binary named 'seo-autopilot' exists on PATH (which could be benign or attacker-controlled).
Credentials
The skill requests no environment variables, no credentials, and no config paths — these are proportionate to the stated task.
Persistence & Privilege
The skill does not request always:true, does not modify other skills, and is user-invocable only. It does allow exec (normal for instruction-only skills).
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install seo-autopilot
  3. After installation, invoke the skill by name or use /seo-autopilot
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of seo-autopilot skill. - Supports automated local SEO runs for boll-koll.se and hyresbyte.se. - Trigger by sending "seo", "seo boll-koll.se", or "seo hyresbyte.se". - Executes a secure script and returns a pull request link and short summary. - Extracts and highlights top 3 findings from SEO_REPORT.md if available. - Restricts execution to allowlisted sites only.
Metadata
Slug seo-autopilot
Version 1.0.0
License
All-time Installs 19
Active Installs 17
Total Versions 1
Frequently Asked Questions

What is Seo Autopilot?

Run local SEO autopilot for boll-koll.se or hyresbyte.se and return PR link plus summary. It is an AI Agent Skill for Claude Code / OpenClaw, with 2699 downloads so far.

How do I install Seo Autopilot?

Run "/install seo-autopilot" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Seo Autopilot free?

Yes, Seo Autopilot is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Seo Autopilot support?

Seo Autopilot is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Seo Autopilot?

It is built and maintained by adamhjort (@adamhjort); the current version is v1.0.0.

💬 Comments