content-quality-auditor@ 9.9.9
github.com/aaron-he-zhu/seo-geo-claude-skills
Scanned Thu, 28 May 2026 17:00:22 GMT
Scan ID crawl-ahpeycbwnu5nkvrfdtoqx004 · 8ms
C
SCORE 55 / 100
Verdict: Proceed with caution
14 medium findings.
This skill ships without a capability manifest plus 13 other issues listed below.
0 critical0 high14 medium-2 rules passed
Why grade C?
score · 55 / 100The current grade reflects 14 medium findings (6+ MEDs → C).
0 CRIT0 HIGH14 MED0 LOW
To reach a higher grade
- BReach Btarget score 75
Resolve 9 of 14 MED (cap is 5).
- AReach Atarget score 95
Resolve 12 of 14 MED (cap is 2).
Thresholds are documented at /docs/grading. Source-of-truth is the grade() function in @skillox/scanner.
Findings · ordered by severity
medNo capability manifest declaredThe skill ships without a `manifest.yaml` or `capabilities` block in its frontmatter. Without a manifest, the runtime cannot enforce what this skill is permitted to do.rule: no-manifest▾
No capability manifest declared
The skill ships without a `manifest.yaml` or `capabilities` block in its frontmatter. Without a manifest, the runtime cannot enforce what this skill is permitted to do.
rule:
no-manifestmedLink text shows "core-eeat-benchmark.md" but points at github.comThe visible link text contains the domain `core-eeat-benchmark.md`, but the URL actually targets `github.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.▾
Link text shows "core-eeat-benchmark.md" but points at github.com
The visible link text contains the domain `core-eeat-benchmark.md`, but the URL actually targets `github.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.
64# Content Quality Auditor
65
66> Based on [CORE-EEAT Content Benchmark](https://github.com/aaron-he-zhu/core-eeat-content-benchmark). Full benchmark reference: [references/core-eeat-benchmark.md](https://github.com/aaron-he-zhu/seo-geo-claude-skills/blob/main/references/core-eeat-benchmark.md)← text→core-eeat-benchmark.md · href→github.com
67
68This skill evaluates content quality across 80 standardized criteria organized in 8 dimensions. It produces a comprehensive audit report with per-item scoring, dimension and system scores, weighted totals by content type, and a prioritized action plan.
medLink text shows "claude.md" but points at github.comThe visible link text contains the domain `claude.md`, but the URL actually targets `github.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.▾
Link text shows "claude.md" but points at github.com
The visible link text contains the domain `claude.md`, but the URL actually targets `github.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.
129**Expected output**: a CORE-EEAT audit report, a publish-readiness verdict, and a short handoff summary ready for `memory/audits/content/`.
130
131- **Reads**: the target content, content type, supporting evidence, and any prior decisions from [CLAUDE.md](https://github.com/aaron-he-zhu/seo-geo-claude-skills/blob/main/CLAUDE.md) and the shared [State Model](https://github.com/aaron-he-zhu/seo-geo-claude-skills/blob/main/references/state-model.md) when available.← text→claude.md · href→github.com
132- **Writes**: a user-facing audit report plus a reusable summary that can be stored under `memory/audits/content/`.
133- **Promotes**: veto items and publish blockers to `memory/hot-cache.md` (auto-saved, no user confirmation needed). Top improvement priorities to `memory/open-loops.md`.
medLink text shows "connectors.md" but points at github.comThe visible link text contains the domain `connectors.md`, but the URL actually targets `github.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.▾
Link text shows "connectors.md" but points at github.com
The visible link text contains the domain `connectors.md`, but the URL actually targets `github.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.
136## Data Sources
137
138> See [CONNECTORS.md](https://github.com/aaron-he-zhu/seo-geo-claude-skills/blob/main/CONNECTORS.md) for tool category placeholders.← text→connectors.md · href→github.com
139
140**With ~~web crawler + ~~SEO tool connected:**
medLink text shows "security.md" but points at github.comThe visible link text contains the domain `security.md`, but the URL actually targets `github.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.▾
Link text shows "security.md" but points at github.com
The visible link text contains the domain `security.md`, but the URL actually targets `github.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.
139
140**With ~~web crawler + ~~SEO tool connected:**
141Fetch only user-provided or authorized URLs after [SECURITY.md §Scraping Boundaries](https://github.com/aaron-he-zhu/seo-geo-claude-skills/blob/main/SECURITY.md); then extract HTML, schema, links, and competitor content.← text→security.md · href→github.com
142
143**With manual data only:**
medLink text shows "core-eeat-benchmark.md" but points at github.comThe visible link text contains the domain `core-eeat-benchmark.md`, but the URL actually targets `github.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.▾
Link text shows "core-eeat-benchmark.md" but points at github.com
The visible link text contains the domain `core-eeat-benchmark.md`, but the URL actually targets `github.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.
192### Step 2: CORE Audit (40 items)
193
194Evaluate each item against the criteria in [references/core-eeat-benchmark.md](https://github.com/aaron-he-zhu/seo-geo-claude-skills/blob/main/references/core-eeat-benchmark.md).← text→core-eeat-benchmark.md · href→github.com
195
196Score each item:
medLink text shows "item-reference.md" but points at github.comThe visible link text contains the domain `item-reference.md`, but the URL actually targets `github.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.▾
Link text shows "item-reference.md" but points at github.com
The visible link text contains the domain `item-reference.md`, but the URL actually targets `github.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.
229Repeat the same table format for **Ept** (Expertise), **A** (Authority), and **T** (Trust), scoring all 10 items per dimension.
230
231See [references/item-reference.md](https://github.com/aaron-he-zhu/seo-geo-claude-skills/blob/main/cross-cutting/content-quality-auditor/references/item-reference.md) for the complete 80-item ID lookup table and site-level item handling notes.← text→item-reference.md · href→github.com
232
233<!-- runbook-sync start: source_sha256=6920bed5f82fd3fe0d6538d71e797e35823385fecfeabdfd81257d2c9d7922d3 block_sha256=be2750a3a71e6e1158c336ae276a2f0c74473b0cf02e1a40b7292d31c7517b12 -->
medLink text shows "skill-contract.md" but points at github.comThe visible link text contains the domain `skill-contract.md`, but the URL actually targets `github.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.▾
Link text shows "skill-contract.md" but points at github.com
The visible link text contains the domain `skill-contract.md`, but the URL actually targets `github.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.
271### Non-auditor skills
272
273Non-auditor skill handoffs follow [skill-contract.md §Handoff Summary Format](https://github.com/aaron-he-zhu/seo-geo-claude-skills/blob/main/references/skill-contract.md) as-is. Cap-related fields do not apply. Non-auditors never emit `cap_applied` / `raw_overall_score` / `final_overall_score`, and MUST NOT use the `class: auditor-output` frontmatter marker.← text→skill-contract.md · href→github.com
274
275---
medLink text shows "core-eeat-benchmark.md" but points at github.comThe visible link text contains the domain `core-eeat-benchmark.md`, but the URL actually targets `github.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.▾
Link text shows "core-eeat-benchmark.md" but points at github.com
The visible link text contains the domain `core-eeat-benchmark.md`, but the URL actually targets `github.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.
282
283**Veto items**:
284- CORE-EEAT: T04, C01, R10 — see [core-eeat-benchmark.md §Veto Items](https://github.com/aaron-he-zhu/seo-geo-claude-skills/blob/main/references/core-eeat-benchmark.md)← text→core-eeat-benchmark.md · href→github.com
285- CITE: T03, T05, T09 — see [cite-domain-rating.md §Veto Items](https://github.com/aaron-he-zhu/seo-geo-claude-skills/blob/main/references/cite-domain-rating.md)
286
medLink text shows "cite-domain-rating.md" but points at github.comThe visible link text contains the domain `cite-domain-rating.md`, but the URL actually targets `github.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.▾
Link text shows "cite-domain-rating.md" but points at github.com
The visible link text contains the domain `cite-domain-rating.md`, but the URL actually targets `github.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.
283**Veto items**:
284- CORE-EEAT: T04, C01, R10 — see [core-eeat-benchmark.md §Veto Items](https://github.com/aaron-he-zhu/seo-geo-claude-skills/blob/main/references/core-eeat-benchmark.md)
285- CITE: T03, T05, T09 — see [cite-domain-rating.md §Veto Items](https://github.com/aaron-he-zhu/seo-geo-claude-skills/blob/main/references/cite-domain-rating.md)← text→cite-domain-rating.md · href→github.com
286
287### Decision table
medLink text shows "skill-contract.md" but points at github.comThe visible link text contains the domain `skill-contract.md`, but the URL actually targets `github.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.▾
Link text shows "skill-contract.md" but points at github.com
The visible link text contains the domain `skill-contract.md`, but the URL actually targets `github.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.
429## §5 · User-Facing Translation Layer
430
431Before rendering to the user, translate internal language. This respects [skill-contract.md §Response Presentation Norms](https://github.com/aaron-he-zhu/seo-geo-claude-skills/blob/main/references/skill-contract.md) which forbids internal jargon in user output.← text→skill-contract.md · href→github.com
432
433### Forbidden in user-visible output
medLink text shows "auditor-runbook.md" but points at github.comThe visible link text contains the domain `auditor-runbook.md`, but the URL actually targets `github.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.▾
Link text shows "auditor-runbook.md" but points at github.com
The visible link text contains the domain `auditor-runbook.md`, but the URL actually targets `github.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.
5383. **Scope**: YAML handoff blocks appearing elsewhere (blog posts, README examples, skill documentation) are NOT audit artifacts and MUST NOT be treated as such by downstream skills — the path + frontmatter combination is the authoritative filter
539
540This is a **restatement for readability** — the authoritative rule lives in [references/auditor-runbook.md §1](https://github.com/aaron-he-zhu/seo-geo-claude-skills/blob/main/references/auditor-runbook.md). If this text drifts from §1 source, Runbook wins.← text→auditor-runbook.md · href→github.com
541
542### Step 4: Scoring & Report
medLink text shows "item-reference.md" but points at github.comThe visible link text contains the domain `item-reference.md`, but the URL actually targets `github.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.▾
Link text shows "item-reference.md" but points at github.com
The visible link text contains the domain `item-reference.md`, but the URL actually targets `github.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.
693## Example
694
695See [references/item-reference.md](https://github.com/aaron-he-zhu/seo-geo-claude-skills/blob/main/cross-cutting/content-quality-auditor/references/item-reference.md) for a complete scored example showing the C dimension with all 10 items, priority improvements, and weighted scoring.← text→item-reference.md · href→github.com
696
697## Tips for Success
medLink text shows "item-reference.md" but points at github.comThe visible link text contains the domain `item-reference.md`, but the URL actually targets `github.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.▾
Link text shows "item-reference.md" but points at github.com
The visible link text contains the domain `item-reference.md`, but the URL actually targets `github.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.
709
710- [CORE-EEAT Content Benchmark](https://github.com/aaron-he-zhu/seo-geo-claude-skills/blob/main/references/core-eeat-benchmark.md) — Full 80-item benchmark with dimension definitions, scoring criteria, and GEO-First item markers
711- [references/item-reference.md](https://github.com/aaron-he-zhu/seo-geo-claude-skills/blob/main/cross-cutting/content-quality-auditor/references/item-reference.md) — All 80 item IDs in a compact lookup table + site-level item handling notes + scored example report← text→item-reference.md · href→github.com
712- [GEO Score Feedback Loop](https://github.com/aaron-he-zhu/seo-geo-claude-skills/blob/main/references/geo-score-feedback-loop.md) — Optional: how to validate the GEO Score prediction against actual AI engine citation behavior (T+14/T+45/T+90 measurement protocol). Relevant for agencies and GEO teams tracking prediction accuracy over time.
713
skillox.io/r/crawl-ahpeycbwnu5nkvrfdtoqx004