📦 Wordpress Seo Autopilot — WP SEO全自动
v1.0.0一键完成 WordPress 全站 SEO：自动生成 meta 标签、结构化数据、智能内链并同步 RankMath，全面提升搜索排名与流量。
0· 388·1 当前·1 累计
by @ncreighton下载技能包
最后更新
2026/4/22
安全扫描
OpenClaw
可疑
medium confidenceNULL
评估建议
This skill could do exactly what it promises, but there are red flags you should consider before installing: SKILL.md requires high‑privilege WordPress admin application passwords, a RankMath API key, and optional third‑party keys and a Google service‑account JSON path — yet the registry metadata lists no required env vars or config paths. That mismatch is concerning. If you consider using it: 1) Do not supply production admin credentials immediately — test on a staging copy first. 2) Use an app...详细分析 ▾
ℹ 用途与能力
The functionality described (meta tags, schema, internal linking, RankMath sync) legitimately requires WordPress REST API access and RankMath/API keys, so the claimed capabilities align with the required credentials in SKILL.md. However, the registry metadata lists no required env vars/config paths while SKILL.md declares multiple required and optional secrets and a service-account file path — that inconsistency is unexpected and should be clarified.
⚠ 指令范围
SKILL.md contains detailed runtime instructions that instruct the agent to read environment variables and a service-account JSON path, query Google Search Console and third‑party APIs, and perform automated bulk modifications (inserting internal links, updating meta and schema across many posts). The instructions permit direct content modification on live sites and reference file paths and env vars that were not declared in registry metadata, increasing the risk of unintended data access or changes.
✓ 安装机制
This is an instruction-only skill with no install spec and no code files, so it does not write or download binaries. That keeps install risk low compared to skills that fetch and execute code.
⚠ 凭证需求
SKILL.md asks for WORDPRESS_USERNAME and WORDPRESS_APP_PASSWORD (admin-level application password), RANKMATH_API_KEY, and optional API tokens and a path to a Google service-account JSON. Those are powerful credentials that permit content modification and data access. While these are functionally necessary for the described features, requesting admin credentials and multiple external API keys is high privilege and should be minimized and justified explicitly. Also the registry did not declare these env vars — a mismatch.
⚠ 持久化与权限
The skill is not marked always:true, but model invocation is allowed (default). Combined with the ability to perform bulk automated edits and the high-privilege credentials the skill requests, autonomous invocation increases blast radius. The skill does not describe safeguards (preview-only mode, dry-run, approval step) before making mass changes.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/15
NULL
● 可疑
安装命令
点击复制官方npx clawhub@latest install wordpress-seo-autopilot
镜像加速npx clawhub@latest install wordpress-seo-autopilot --registry https://cn.longxiaskill.com