rank-tracker@ 9.9.9

github.com/aaron-he-zhu/seo-geo-claude-skills
Verdict: Proceed with caution
0 critical0 high7 medium
C
SCORE 55 / 100
$skillox install rank-trackerSoon
Sign in to followFollowing emails you when a re-scan drops the grade. Opt-out is per-creator on /account/billing.

Why grade C?

score · 55 / 100

The current grade reflects 7 medium findings (6+ MEDs → C).

0 CRIT0 HIGH7 MED0 LOW
To reach a higher grade
  • B
    Reach Btarget score 75

    Resolve 2 of 7 MED (cap is 5).

  • A
    Reach Atarget score 95

    Resolve 5 of 7 MED (cap is 2).

Thresholds are documented at /docs/grading. Source-of-truth is the grade() function in @skillox/scanner.

Latest scan findings

Scan crawl-o2ngxjl2coswl436r340dewb · Thu, 28 May 2026 17:00:46 GMT · 3ms

med
No capability manifest declared
The skill ships without a `manifest.yaml` or `capabilities` block in its frontmatter. Without a manifest, the runtime cannot enforce what this skill is permitted to do.
rule: no-manifest
▾
med
Link text shows "claude.md" but points at github.com
The visible link text contains the domain `claude.md`, but the URL actually targets `github.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.
rule: anchor-href-mismatchline: 79CWE-601
▾
77**Expected output**: a ranking report or delta summary plus the standard handoff summary for `memory/monitoring/`.
78
79- **Reads**: current metrics, baselines, alert thresholds, and reporting context from [CLAUDE.md](https://github.com/aaron-he-zhu/seo-geo-claude-skills/blob/main/CLAUDE.md) and the shared [State Model](https://github.com/aaron-he-zhu/seo-geo-claude-skills/blob/main/references/state-model.md) when available.← text→claude.md · href→github.com
80- **Writes**: a user-facing monitoring deliverable and reusable summary.
81- **Promotes**: significant changes, confirmed anomalies, follow-up actions, and pending decisions to `memory/open-loops.md`.
med
Link text shows "skill-contract.md" but points at github.com
The visible link text contains the domain `skill-contract.md`, but the URL actually targets `github.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.
rule: anchor-href-mismatchline: 86CWE-601
▾
84### Handoff Summary
85
86> Emit the standard shape from [skill-contract.md §Handoff Summary Format](https://github.com/aaron-he-zhu/seo-geo-claude-skills/blob/main/references/skill-contract.md).← text→skill-contract.md · href→github.com
87
88## Data Sources
med
Link text shows "connectors.md" but points at github.com
The visible link text contains the domain `connectors.md`, but the URL actually targets `github.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.
rule: anchor-href-mismatchline: 90CWE-601
▾
88## Data Sources
89
90All integrations optional (see [CONNECTORS.md](https://github.com/aaron-he-zhu/seo-geo-claude-skills/blob/main/CONNECTORS.md)). With tools, pull rankings from ~~SEO tool, impressions from ~~search console, traffic from ~~analytics, and AI citations from ~~AI monitor. Without tools, ask for positions, volumes, competitor data, and SERP feature status.← text→connectors.md · href→github.com
91
92## Instructions
med
Link text shows "ranking-analysis-templates.md" but points at github.com
The visible link text contains the domain `ranking-analysis-templates.md`, but the URL actually targets `github.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.
rule: anchor-href-mismatchline: 104CWE-601
▾
1027. **Generate Ranking Report** — summarize overall trend, key wins, concerns, opportunities, SERP feature changes, GEO visibility, and recommendations.
103
104> **Reference**: See [references/ranking-analysis-templates.md](https://github.com/aaron-he-zhu/seo-geo-claude-skills/blob/main/monitor/rank-tracker/references/ranking-analysis-templates.md) for the complete output templates for all seven steps.← text→ranking-analysis-templates.md · href→github.com
105
106## Example
med
Link text shows "tracking-setup-guide.md" but points at github.com
The visible link text contains the domain `tracking-setup-guide.md`, but the URL actually targets `github.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.
rule: anchor-href-mismatchline: 126CWE-601
▾
124| Position gained | Document and learn | Identify what worked and replicate |
125
126> **Reference**: See [references/tracking-setup-guide.md](https://github.com/aaron-he-zhu/seo-geo-claude-skills/blob/main/monitor/rank-tracker/references/tracking-setup-guide.md) for tracking setup, root-cause taxonomy, CTR benchmarks, SERP feature impact, and algorithm-update assessment.← text→tracking-setup-guide.md · href→github.com
127
128### Save Results
med
Link text shows "skill-contract.md" but points at github.com
The visible link text contains the domain `skill-contract.md`, but the URL actually targets `github.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.
rule: anchor-href-mismatchline: 138CWE-601
▾
136## Next Best Skill
137
138Initial setup (no baseline) → [alert-manager](https://github.com/aaron-he-zhu/seo-geo-claude-skills/blob/main/monitor/alert-manager/SKILL.md). Subsequent runs (baseline exists) → Terminal. Visited-set rule applies per [skill-contract.md](https://github.com/aaron-he-zhu/seo-geo-claude-skills/blob/main/references/skill-contract.md).← text→skill-contract.md · href→github.com
139
View latest scan →
skillox.io/c/rank-tracker