performance-reporter@ 9.9.9
github.com/aaron-he-zhu/seo-geo-claude-skills
Scanned Thu, 28 May 2026 17:00:39 GMT
Scan ID crawl-x36l8jgdqk4yinb1shyosya9 · 1ms
B
SCORE 75 / 100
Verdict: Safe to install
5 medium findings.
This skill ships without a capability manifest plus 4 other issues listed below.
0 critical0 high5 medium7 rules passed
Why grade B?
score · 75 / 100The current grade reflects 5 medium findings (3+ MEDs → B).
0 CRIT0 HIGH5 MED0 LOW
To reach a higher grade
- AReach Atarget score 95
Resolve 3 of 5 MED (cap is 2).
Thresholds are documented at /docs/grading. Source-of-truth is the grade() function in @skillox/scanner.
Findings · ordered by severity
medNo capability manifest declaredThe skill ships without a `manifest.yaml` or `capabilities` block in its frontmatter. Without a manifest, the runtime cannot enforce what this skill is permitted to do.rule: no-manifest▾
No capability manifest declared
The skill ships without a `manifest.yaml` or `capabilities` block in its frontmatter. Without a manifest, the runtime cannot enforce what this skill is permitted to do.
rule:
no-manifestmedLink text shows "claude.md" but points at github.comThe visible link text contains the domain `claude.md`, but the URL actually targets `github.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.▾
Link text shows "claude.md" but points at github.com
The visible link text contains the domain `claude.md`, but the URL actually targets `github.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.
79**Expected output**: a delta summary, alert/report output, and a short handoff summary ready for `memory/monitoring/`.
80
81- **Reads**: current metrics, previous baselines, alert thresholds, and reporting context from [CLAUDE.md](https://github.com/aaron-he-zhu/seo-geo-claude-skills/blob/main/CLAUDE.md) and the shared [State Model](https://github.com/aaron-he-zhu/seo-geo-claude-skills/blob/main/references/state-model.md) when available.← text→claude.md · href→github.com
82- **Writes**: a user-facing monitoring deliverable plus a reusable summary that can be stored under `memory/monitoring/`.
83- **Promotes**: significant changes, confirmed anomalies, follow-up actions, and pending decisions to `memory/open-loops.md`.
medLink text shows "skill-contract.md" but points at github.comThe visible link text contains the domain `skill-contract.md`, but the URL actually targets `github.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.▾
Link text shows "skill-contract.md" but points at github.com
The visible link text contains the domain `skill-contract.md`, but the URL actually targets `github.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.
86### Handoff Summary
87
88> Emit the standard shape from [skill-contract.md §Handoff Summary Format](https://github.com/aaron-he-zhu/seo-geo-claude-skills/blob/main/references/skill-contract.md).← text→skill-contract.md · href→github.com
89
90## Data Sources
medLink text shows "connectors.md" but points at github.comThe visible link text contains the domain `connectors.md`, but the URL actually targets `github.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.▾
Link text shows "connectors.md" but points at github.com
The visible link text contains the domain `connectors.md`, but the URL actually targets `github.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.
90## Data Sources
91
92All integrations optional (see [CONNECTORS.md](https://github.com/aaron-he-zhu/seo-geo-claude-skills/blob/main/CONNECTORS.md)). With tools connected, aggregates traffic from ~~analytics, search data from ~~search console, rankings/backlinks from ~~SEO tool, and AI visibility from ~~AI monitor. Without tools, ask user for analytics exports, Search Console data, ranking data, and KPIs.← text→connectors.md · href→github.com
93
94## Instructions
medLink text shows "report-output-templates.md" but points at github.comThe visible link text contains the domain `report-output-templates.md`, but the URL actually targets `github.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.▾
Link text shows "report-output-templates.md" but points at github.com
The visible link text contains the domain `report-output-templates.md`, but the URL actually targets `github.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.
94## Instructions
95
96When a user requests a performance report, use [references/report-output-templates.md](https://github.com/aaron-he-zhu/seo-geo-claude-skills/blob/main/monitor/performance-reporter/references/report-output-templates.md) and cover:← text→report-output-templates.md · href→github.com
97
981. **Define Report Parameters** -- Domain, period, comparison period, report type, audience, focus areas, and data freshness.
skillox.io/r/crawl-x36l8jgdqk4yinb1shyosya9