seo-blog

seo-blog is a skill for Claude Code from XuanRanL/loamwright-SEO-Skill. It costs 129 tokens per session (17,688 once invoked), scanned B, original, Apache-2.0.

An end-to-end system for researching, writing, improving, publishing, and monitoring articles for search engines and AI-generated search answers. SEO means improving pages so search engines can find and rank them; GEO here means preparing content for AI search systems.

In plain words
What is it for?
Use it to research topics, write or refresh articles, optimize pages, publish to WordPress, and monitor initial results.
Why use it?
It organizes many content tasks into defined phases and runs them in order, reducing skipped steps and manual coordination.

Skill for Claude Code

Written for Claude Code: allowed-tools in frontmatter. Also seen: mentions CLAUDE.md; mentions subagents; mentions Claude Code.

Part of the xuanran-seo-blog-writer plugin — 68 skills, 34 agents, 4 hooks shipped together

Good fit Use it to research topics, write or refresh articles, optimize pages, publish to WordPress, and monitor initial results.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/xuanranl/loamwright-seo-skill/seo-blog
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add XuanRanL/loamwright-SEO-Skill --skill seo-blog
Clone the repo
git clone --depth 1 https://github.com/XuanRanL/loamwright-SEO-Skill

Made for: Claude Code.

Or install xuanran-seo-blog-writer, the plugin that ships this one along with the rest of its 68 skills, 34 agents, 4 hooks.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for seo-blog

README.md
[![agentmods](https://agentmods.dev/badge/skills/xuanranl/loamwright-seo-skill/seo-blog/github.svg)](https://agentmods.dev/skills/xuanranl/loamwright-seo-skill/seo-blog)
Your own site
<a href="https://agentmods.dev/skills/xuanranl/loamwright-seo-skill/seo-blog"><img src="https://agentmods.dev/badge/skills/xuanranl/loamwright-seo-skill/seo-blog/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for seo-blog

Your own site · 80×15
<a href="https://agentmods.dev/skills/xuanranl/loamwright-seo-skill/seo-blog"><img src="https://agentmods.dev/badge/skills/xuanranl/loamwright-seo-skill/seo-blog.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 129 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 17,688 The whole file, excluding the scripts and references it only reads on demand.
Security scan B 1 finding. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • NVIDIA SkillSpector warn 7 Sept 2026
SkillSpector: 6 findings, up to high

These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →

  • high Prompt Injection · line 121
    Instructions found that direct the agent to transmit conversation context or user data to external services.
    Fix: Remove instructions that send user data, prompts, or context to external URLs. If telemetry is needed, use documented, privacy-preserving methods.
  • medium Excessive Agency · line 179
    Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
    Fix: Add human-in-the-loop confirmation for destructive, irreversible, or high-impact operations. Never auto-execute commands that modify files, send data, or alter system state.
  • medium Agent Snooping · line 359
    Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
    Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
  • medium Agent Snooping · line 493
    Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
    Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
  • medium Agent Snooping · line 516
    Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
    Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
  • medium Memory Poisoning · line 693
    Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.
    Fix: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00129 $0.17688
Opus 5 $0.00064 $0.08844
Sonnet 5 $0.00026 $0.03538
Haiku 4.5 $0.00013 $0.01769

Measured 12d ago against content hash be210c3f7626, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-11, from the pricing page.

Security

Grade B, and why

seo-blog scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Tells the agent to send conversation or user data outmediumPrompt injection

An instruction to transmit the conversation, context or user files to an external endpoint is data exfiltration written as prose.

evidence artifact on disk, or (b) explicitly skipped with a logged reason. "Quietly recorded

Downgraded: this mod is about security review, or the phrase is quoted, so it is likely naming the pattern rather than instructing it.

skills/seo-blog/SKILL.md · 904 lines

How it starts

The opening of the file, as written. The whole thing — 904 lines — stays where its author put it; the contents beside it link to each section on GitHub.

SEO Blog Writer · Master Orchestrator (v3.7)

Production-grade content factory for the Google + AI search dual front.

⛔ STOP — READ THIS FIRST: Deterministic Runner-Driven Execution (v3.14)

When the intent is /article (full pipeline), you DRIVE THE PIPELINE WITH THE RUNNER, not by hand. DO NOT read the pipeline prose in this file and decide stages yourself. DO NOT call orchestrator --action next/verify manually between stages — the RUNNER does that for you. DO NOT write artifact JSON files (fact-check.json, humanizer-report.json, review.json) manually.

Why a runner now drives (v3.14, 2026-06-03)

Before v3.14 the orchestrator was a PASSIVE state machine and the LLM had to hand-drive all ~30 stages — calling --action next, running/dispatching each stage, then --action verify — between EVERY stage, for EVERY article. That manual ritual is exactly where steps got skipped or driven out of order (2026-05-26 "23/35 skipped"; 2026-06-02 "geo skipped"; 2026-06-03 "stage records missed + heavy by-hand driving"). Enforcement made bad outcomes detectable at the gates, but execution was only as reliable as operator discipline. scripts/pipeline/run_pipeline.py now drives the loop in CODE: it runs/launches/checks every BASH/BACKGROUND/CHECK stage itself and records it, and STOPS only to hand you the handful of LLM stages that genuinely need a subagent. Your surface area drops from "orchestrate 30 stages" to "service the LLM stages I'm handed."

The Loop (execute this after state.json is created)

REPEAT:
  1. result = Bash("python -m scripts.pipeline.run_pipeline --workspace {task_id} --json"
                   [+ " --completed-llm {last_llm_stage}" if you just finished one])

  2. Read result.action:
     "COMPLETE"      → DONE. Proceed to the publish-confirmation step.
     "DISPATCH_LLM"  → Dispatch Agent(subagent_type=result.subagent_type, prompt=result.dispatch_prompt).
                       If subagent_type is "", execute result.description inline (format-selector /
                       outline-architect / meta-builder are inline LLM stages).
                       After the subagent finishes, confirm every path in result.expected_outputs exists,
                       then GOTO 1 with --completed-llm {result.stage}.
                       ⚠ TRANSIENT NO-OP (v3.38.3): a dispatched subagent can occasionally return
                       with ZERO tool uses and no output files (harness init glitch — a 2026-07-09
                       humanizer did this, returning only a garbled system-reminder). expected_outputs
                       will be missing: simply RE-DISPATCH the same subagent once before investigating
                       anything else. Same rule when a subagent dies mid-run to an API/session error
                       (a geo-auditor was killed this way in the same batch): check whether its
                       evidence artifact landed on disk; if not, re-dispatch — the draft itself is
                       usually untouched.
     "GATE_FAILED"   → A lint/quality gate found defects (result.gate). Route to repair (fix the draft
                       or re-dispatch the responsible subagent per subskills/cross-cutting/repair-orchestrator),
                       then GOTO 1 (the runner re-runs the failed stage).
     "WAIT"          → A CHECK isn't ready (e.g. Fork B image gen still running). Wait briefly, GOTO 1.
     "BLOCKED"       → A stage is missing inputs (result.missing_inputs). Fix them, GOTO 1.
     "ERROR"         → A BASH stage crashed (result.detail). Inspect, fix, GOTO 1.
     "LOCKED"        → Another run_pipeline driver is ALREADY active on this workspace (exit 30).
                       Wait for it to return, then GOTO 1. NEVER delete the .pipeline-driver.lock
                       sidecar and NEVER launch a second driver call while one is still running —
                       the 2026-07-07 batch double-published 2 of 3 posts exactly this way (a bare
                       status-check invocation re-dispatched the in-flight wordpress-publisher).

Read the full file on GitHub · 904 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 12d ago First seen · 904 lines · 129 tokens per session scan B be210c3f7626

Subscribe to this mod's changes

seo-blog is a skill published in the GitHub repository XuanRanL/loamwright-SEO-Skill (49 stars, last pushed 25d ago), licensed Apache-2.0. It adds 129 tokens to every session and 17,688 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it B with 1 finding (tells the agent to send conversation or user data out). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

geo-platform-optimizer

Platform-specific AI search optimization — audit and optimize for Google AI Overviews, ChatGPT, Perplexity, Gemini, and Bing Copilot individually.

zubair-trabzada/geo-seo-claude · 34 tokens

continuous-improvement-loop

Run Part 12 of the engagement methodology — the continuous improvement loop that aggregates quarterly-review, customer-feedback, competitive, and operating signals into a Quarterly Product & Offering Improvement Brief for business leadership, plus fast 1-3 page ad-hoc briefs when a significant signal lands…

indranilbanerjee/digital-marketing-pro · 148 tokens

four-core-documents

Produce Part 3 of the 12-Part engagement: the four strategic-spine documents across 61 steps — 3.1 Business & SBU Analysis, 3.2 Segmentation Framework, 3.3 Brand Positioning & Communications, 3.4 DMFlow — with --doc single-document runs, --view v2 re-runs, and a --combined executive stitch. Triggers on…

indranilbanerjee/digital-marketing-pro · 164 tokens

seo-plan

Build a 12-month SEO strategy and phased roadmap with industry templates (SaaS, ecommerce, local, publisher, agency). With fresh specialist outputs it runs as a dispatcher: scores four pillars — technical, content, topical, AI search — and makes the weakest pillar the plan's lead theme; missing specialists re-run only…

indranilbanerjee/digital-marketing-pro · 177 tokens

c2pa-metadata

Embed a C2PA provenance manifest into an AI-generated marketing asset (PNG, JPG, WebP, GIF, TIFF, MP4, MOV, WebM, MP3, WAV, PDF) via scripts/embed-c2pa.py — produces a signed copy of the file carrying IPTC digital-source-type AI claims, an optional c2pa.ai-disclosure assertion for EU AI Act Article 50 (applicable 2…

indranilbanerjee/digital-marketing-pro · 183 tokens

import-guidelines

Import brand guidelines — voice and tone rules, messaging, banned words and restrictions, channel styles, visual identity — and structure them into enforceable markdown files in the brand's guidelines layer, auto-classified by category, conflict-checked against the brand profile, and merged with existing rules rather…

indranilbanerjee/digital-marketing-pro · 129 tokens