SEO evidence toolkit: analyzes Screaming Frog exports, adds bounded live and infrastructure checks, and produces structured audits, task backlogs, and reports via CLI and local MCP.
- capability exposure inferred + 22
- tool safety inferred + 10
inferred
The A–E grade is our heuristic synthesis — a "review this" prompt, not a verdict. Each factor is tagged by what backs it: attested (a verifiable record), reported (a third party's claim), or inferred (our own heuristic, e.g. permissions). See methodology.
grade last moved 10h ago · see ecosystem CVEs →
No known CVEs for this server.
- medium dangerous code
dynamic exec: __import__()
- medium toxic flow (lethal trifecta)
lethal trifecta reachable across this server's tool + source surface: private-data access + untrusted-content ingestion + network exfil (a leg is proven only in the analyzed source)
analyzed commit 0cc5acd · analyzer v33 · 2d ago
skills & prompt files 29
- skill PavloSEO-seotools-0cc5acd/.claude/skills/analytics-console-review/SKILL.md
- skill PavloSEO-seotools-0cc5acd/.claude/skills/audit-roadmap/SKILL.md
- skill PavloSEO-seotools-0cc5acd/.claude/skills/backlinks-check/SKILL.md
- skill PavloSEO-seotools-0cc5acd/.claude/skills/duplicate-audit/SKILL.md
- skill PavloSEO-seotools-0cc5acd/.claude/skills/geo-aeo-audit/SKILL.md
- skill PavloSEO-seotools-0cc5acd/.claude/skills/heading-outline/SKILL.md
- skill PavloSEO-seotools-0cc5acd/.claude/skills/js-render-check/SKILL.md
- skill PavloSEO-seotools-0cc5acd/.claude/skills/regional-audit/SKILL.md
- skill PavloSEO-seotools-0cc5acd/.claude/skills/robots-audit/SKILL.md
- skill PavloSEO-seotools-0cc5acd/.claude/skills/schema-graph/SKILL.md
- skill PavloSEO-seotools-0cc5acd/.claude/skills/security-audit/SKILL.md
- skill PavloSEO-seotools-0cc5acd/.claude/skills/seo-deep-audit/SKILL.md
- skill PavloSEO-seotools-0cc5acd/.claude/skills/seo-recon/SKILL.md
- skill PavloSEO-seotools-0cc5acd/.claude/skills/sf-analyzer/SKILL.md
- skill PavloSEO-seotools-0cc5acd/.claude/skills/sf-boundaries/SKILL.md
- skill PavloSEO-seotools-0cc5acd/.claude/skills/sf-config/SKILL.md
- skill PavloSEO-seotools-0cc5acd/.claude/skills/sf-report/SKILL.md
- skill PavloSEO-seotools-0cc5acd/.claude/skills/sf-tasks/SKILL.md
- skill PavloSEO-seotools-0cc5acd/.claude/skills/silo-audit/SKILL.md
- skill PavloSEO-seotools-0cc5acd/.claude/skills/site-report/SKILL.md
- skill PavloSEO-seotools-0cc5acd/.claude/skills/tech-audit/SKILL.md
- agent-rules PavloSEO-seotools-0cc5acd/AGENTS.md
- skill PavloSEO-seotools-0cc5acd/seohead/skills/article-writer/SKILL.md
- skill PavloSEO-seotools-0cc5acd/seohead/skills/seo-audit-page/SKILL.md
- skill PavloSEO-seotools-0cc5acd/seohead/skills/seo-content/SKILL.md
- skill PavloSEO-seotools-0cc5acd/seohead/skills/seo-markup/SKILL.md
- skill PavloSEO-seotools-0cc5acd/seohead/skills/seo-optimize/SKILL.md
- skill PavloSEO-seotools-0cc5acd/seohead/skills/seo-research/SKILL.md
- skill PavloSEO-seotools-0cc5acd/seohead/skills/service-landing-copy/SKILL.md
danger signals4
- dynamic code execution __import__() PavloSEO-seotools-0cc5acd/seohead/sf/cli.py :306
__import__(mod) - suspicious endpoint t.me PavloSEO-seotools-0cc5acd/tests/test_page_facts.py :85
assert "https://t.me/acmeshop" in same - suspicious endpoint 169.254.169.254 (cloud metadata) PavloSEO-seotools-0cc5acd/tests/test_public_safety.py :30
net.validate_url("http://169.254.169.254/latest/meta-data") - suspicious endpoint 93.184.216.34 PavloSEO-seotools-0cc5acd/tests/test_public_safety.py :61
url = "https://93.184.216.34/start"
[](https://mcpobservatory.com/servers/github:PavloSEO/seotools/security) Heuristic, inferred signals — false positives (legitimately powerful tools, forks, language ports) are expected. Treat each as "review this", not a verdict. See the ecosystem-wide picture on the security hub, or the fleet security of PavloSEO.