alert-manager@ 9.9.9

github.com/aaron-he-zhu/seo-geo-claude-skills
Verdict: Proceed with caution
0 critical0 high7 medium
C
SCORE 55 / 100
$skillox install alert-managerSoon
Sign in to followFollowing emails you when a re-scan drops the grade. Opt-out is per-creator on /account/billing.

Why grade C?

score · 55 / 100

The current grade reflects 7 medium findings (6+ MEDs → C).

0 CRIT0 HIGH7 MED0 LOW
To reach a higher grade
  • B
    Reach Btarget score 75

    Resolve 2 of 7 MED (cap is 5).

  • A
    Reach Atarget score 95

    Resolve 5 of 7 MED (cap is 2).

Thresholds are documented at /docs/grading. Source-of-truth is the grade() function in @skillox/scanner.

Latest scan findings

Scan crawl-h7p465qx16ssf4zyeuih2tc0 · Thu, 28 May 2026 17:00:44 GMT · 3ms

med
No capability manifest declared
The skill ships without a `manifest.yaml` or `capabilities` block in its frontmatter. Without a manifest, the runtime cannot enforce what this skill is permitted to do.
rule: no-manifest
med
Link text shows "claude.md" but points at github.com
The visible link text contains the domain `claude.md`, but the URL actually targets `github.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.
rule: anchor-href-mismatchline: 71CWE-601
69**Expected output**: an alert configuration summary plus the standard handoff summary for `memory/monitoring/`.
70
71- **Reads**: current metrics, baselines, alert thresholds, and reporting context from [CLAUDE.md](https://github.com/aaron-he-zhu/seo-geo-claude-skills/blob/main/CLAUDE.md) and the shared [State Model](https://github.com/aaron-he-zhu/seo-geo-claude-skills/blob/main/references/state-model.md) when available.text→claude.md · href→github.com
72- **Writes**: a user-facing monitoring deliverable and reusable summary.
73- **Promotes**: significant anomalies, durable thresholds, follow-up actions, and pending decisions to `memory/open-loops.md`.
med
Link text shows "skill-contract.md" but points at github.com
The visible link text contains the domain `skill-contract.md`, but the URL actually targets `github.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.
rule: anchor-href-mismatchline: 78CWE-601
76### Handoff Summary
77
78> Emit the standard shape from [skill-contract.md §Handoff Summary Format](https://github.com/aaron-he-zhu/seo-geo-claude-skills/blob/main/references/skill-contract.md).text→skill-contract.md · href→github.com
79
80## Data Sources
med
Link text shows "connectors.md" but points at github.com
The visible link text contains the domain `connectors.md`, but the URL actually targets `github.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.
rule: anchor-href-mismatchline: 82CWE-601
80## Data Sources
81
82All integrations optional (see [CONNECTORS.md](https://github.com/aaron-he-zhu/seo-geo-claude-skills/blob/main/CONNECTORS.md)). With tools, monitor real-time feeds from ~~SEO tool, ~~search console, and ~~web crawler. Without tools, ask for baselines, critical keywords, preferences, and historical data.text→connectors.md · href→github.com
83
84## Instructions
med
Link text shows "alert-configuration-templates.md" but points at github.com
The visible link text contains the domain `alert-configuration-templates.md`, but the URL actually targets `github.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.
rule: anchor-href-mismatchline: 94CWE-601
925. **Create Alert Summary** — deliver category counts, critical playbook, and weekly review checklist.
93
94> **Reference**: See [references/alert-configuration-templates.md](https://github.com/aaron-he-zhu/seo-geo-claude-skills/blob/main/monitor/alert-manager/references/alert-configuration-templates.md) for the full category tables, thresholds, and response-plan templates.text→alert-configuration-templates.md · href→github.com
95
96## Example
med
Link text shows "alert-threshold-guide.md" but points at github.com
The visible link text contains the domain `alert-threshold-guide.md`, but the URL actually targets `github.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.
rule: anchor-href-mismatchline: 117CWE-601
115| Security issues | Any detected | Any detected | Daily |
116
117> **Reference**: See [references/alert-threshold-guide.md](https://github.com/aaron-he-zhu/seo-geo-claude-skills/blob/main/monitor/alert-manager/references/alert-threshold-guide.md) for threshold setting, fatigue prevention, escalation paths, and response playbooks.text→alert-threshold-guide.md · href→github.com
118
119### Save Results
med
Link text shows "skill-contract.md" but points at github.com
The visible link text contains the domain `skill-contract.md`, but the URL actually targets `github.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.
rule: anchor-href-mismatchline: 129CWE-601
127## Next Best Skill
128
129Reporting cadence requested → [performance-reporter](https://github.com/aaron-he-zhu/seo-geo-claude-skills/blob/main/monitor/performance-reporter/SKILL.md). Standalone setup → Terminal. Visited-set rule applies per [skill-contract.md](https://github.com/aaron-he-zhu/seo-geo-claude-skills/blob/main/references/skill-contract.md).text→skill-contract.md · href→github.com
130
View latest scan →
skillox.io/c/alert-manager