跳转到正文
skillsafebeta
← 报告库
用途分类 / 内容写作

Ai Seo Skill 安全审计

作者说它能做什么（原文）

When the user wants to optimize content for AI search engines, get cited by LLMs, or appear in AI-generated answers. Also use when the user mentions 'AI SEO,' 'AEO,' 'GEO,' 'LLMO,' 'answer engine optimization,' 'generative engine optimization,' 'LLM optimization,' 'AI Overviews,' 'optimize for ChatGPT,' 'optimize for Perplexity,' 'AI citations,' 'AI visibility,' 'zero-click search,' 'how do I show

第三方安全检查结论

发现安全风险

已检查文件
10
发现的风险
5
会不会运行危险命令？检查是否下载程序后直接运行、让他人远程控制电脑，或藏起要运行的命令。发现 2 项风险
中风险

建议执行未固定版本的 npx 包

原文依据：3 处
发现了什么

命令 `npx is-agentic` 可能从包仓库下载并立即执行当前发布版本。Skill 没有固定版本、校验哈希或要求先检查包内容。

为什么需要注意

如果包、发布者账户或依赖链被入侵，代码会以运行命令者的权限执行，可能读取项目文件、环境变量或凭据并修改本地文件。域名也会作为参数交给该工具。

这是实际建议运行的命令，不是仅供说明的代码示例。命令没有 `@版本` 或完整性校验，npx 在需要时可下载并立即执行当前包；风险发生在用户选择命令行方案并运行它时。影响取决于下载包当时的内容及本机权限。可限制为网页方案，或要求作者提供固定版本、来源与校验值。

references/agent-readiness.md:7来自说明文档打开原文件
| Tool | Run it | Method ||---|---|---|| **Is Agentic** (Vercel + Ora) | `npx is-agentic yourdomain.com` or [is-agentic.com](https://is-agentic.com) | 100+ checks; Essential checks carry most of the score; Recommended checks activate only when evidence shows you have that surface (API, MCP server, commerce); not-applicable checks are excluded, not failed; includes an observed agent journey showing where a real agent hit friction || **Frase Agent Readiness Checker** | [frase.io/tools/agent-readiness](https://www.frase.io/tools/agent-readiness) | Access / Discovery / Parseability triad; 80+ = agents can reliably use the site, 60–79 = solid with gaps, <60 = real access problems |
查看另外 2 个位置
references/agent-readiness.md:9来自说明文档打开原文件
|---|---|---|| **Is Agentic** (Vercel + Ora) | `npx is-agentic yourdomain.com` or [is-agentic.com](https://is-agentic.com) | 100+ checks; Essential checks carry most of the score; Recommended checks activate only when evidence shows you have that surface (API, MCP server, commerce); not-applicable checks are excluded, not failed; includes an observed agent journey showing where a real agent hit friction || **Frase Agent Readiness Checker** | [frase.io/tools/agent-readiness](https://www.frase.io/tools/agent-readiness) | Access / Discovery / Parseability triad; 80+ = agents can reliably use the site, 60–79 = solid with gaps, <60 = real access problems |
references/agent-readiness.md:12来自说明文档打开原文件
Run one before and after any agent-readiness work — the score is a shareable artifact and the failed checks are your worklist. (Both are vendor tools with a product behind them; the *checks* are the value, not the pitch.)
中风险

建议安装尚未通过官方目录审批的 WordPress 插件

原文依据：2 处
发现了什么

Skill 指向博客中的直接下载插件，并明确说明它仍在等待 wp.org 审批。所提供材料没有插件源码或可验证版本，因此其“只读”声明无法在本次审计中核实。

为什么需要注意

WordPress 插件在服务器内执行，通常可以访问站点内容、数据库和配置。受损或行为不符声明的插件可能更改页面、泄露数据或接管站点。

该文件把插件列为交付 OKF 的一种实际安装路径，并引导用户从作者博客直接下载，同时承认它尚未获 wp.org 审批。提供的证据中没有插件源码、固定版本或校验值；“只读”只是文档声明，无法据此验证。若用户安装，插件代码会在 WordPress/PHP 权限下运行，可能接触站点数据和设置。用户可等待官方目录审核，或要求可审查源码、固定版本及哈希后再决定。

references/okf.md:70来自说明文档打开原文件
### 2. WordPress plugin (pending wp.org approval)Suganthan's plugin (free, GPL, awaiting wp.org approval at time of writing) installs in a minute, serves the bundle at `/okf/`, and rebuilds on every publish or edit so it stays in sync. Direct download link is in [his blog post](https://suganthan.com/blog/open-knowledge-format/). Requires WordPress 6.0+ and PHP 7.4+. Read-only — never edits posts or settings.
查看另外 1 个位置
references/okf.md:62来自说明文档打开原文件
## How to ship oneThree options, ordered by how much effort they take:### 1. Suganthan's free web tool (recommended for most sites)
会不会泄露文件和密钥？检查是否发送含密码或密钥的文件，以及代码里是否直接写了密钥。发现 1 项风险
中风险

第三方 OKF 生成器会接收站点入口并抓取最多 100 个页面

原文依据：2 处
发现了什么

推荐流程要求把 URL 或 sitemap 粘贴到外部网站，由该服务抓取页面并生成可下载内容包。sitemap 可能列出不易发现但仍可访问的页面。

为什么需要注意

服务提供商会获知提交的域名、URL 清单和被抓取页面内容。若 sitemap 包含预发布、客户专用或误设为公开的地址，这些内容可能被额外披露和保留。

推荐方案要求把站点 URL 或 sitemap 提交到第三方网页工具，并明确说该工具会抓取最多 100 个页面。若 sitemap 包含公开可访问但不易发现的页面，这些页面也可能被该服务请求并用于生成包；证据没有说明数据保留、访问控制或删除政策。风险只在用户选择此外部工具时发生。用户可先精简专用 sitemap、确认隐私条款，或使用可本地审查的生成方式。

references/okf.md:66来自说明文档打开原文件
### 1. Suganthan's free web tool (recommended for most sites)[suganthan.com/okf-generator](https://suganthan.com/okf-generator/) — paste a URL or sitemap, crawls up to 100 pages, returns a downloadable bundle. Also draws the resulting page graph so you can spot disconnected pages before publishing.
查看另外 1 个位置
references/okf.md:64来自说明文档打开原文件
Three options, ordered by how much effort they take:### 1. Suganthan's free web tool (recommended for most sites)[suganthan.com/okf-generator](https://suganthan.com/okf-generator/) — paste a URL or sitemap, crawls up to 100 pages, returns a downloadable bundle. Also draws the resulting page graph so you can spot disconnected pages before publishing.
会不会删除文件或一直在后台运行？检查是否大范围删除文件、改写磁盘，或设置自动启动。未发现风险
会不会绕过安全保护？检查是否跳过网站安全验证、开放过多文件权限，或取消操作前的确认。发现 2 项风险
中风险

全站允许 AI 爬虫会扩大内容访问范围，并可能允许训练用途

原文依据：3 处
发现了什么

参考文件给出对多个机器人执行 `Allow: /` 的配置，并最终建议允许所有 AI 机器人。它同时承认部分机器人兼具训练和搜索用途，而且用户难以只允许引用、拒绝训练。

为什么需要注意

实施后，公开路径可被这些机器人全面抓取；内容可能用于用户不希望的训练或其他处理。若站点存在意外公开、仅靠“不公开链接”保护的页面，抓取范围也会扩大。

参考文件提供了多个机器人统一 `Allow: /` 的配置，并在总行动清单中要求允许所有 AI 机器人。它也明确承认部分机器人同时用于训练和搜索，且 GPTBot 无法按这里的方案只允许引用而拒绝训练。因此，照搬配置会在整站范围扩大自动抓取，并可能超出只获得引用的授权目的。用户应先按各平台最新用途和自身许可政策逐个决定，而不是采用统一放行。

references/platform-ranking-factors.md:120来自说明文档打开原文件
```User-agent: GPTBot           # OpenAI — powers ChatGPT searchUser-agent: ChatGPT-User     # ChatGPT browsing modeUser-agent: PerplexityBot    # Perplexity AI searchUser-agent: ClaudeBot        # Anthropic ClaudeUser-agent: anthropic-ai     # Anthropic Claude (alternate)User-agent: Google-Extended   # Google Gemini and AI OverviewsUser-agent: Bingbot          # Microsoft Copilot (via Bing)Allow: /```
查看另外 2 个位置
references/platform-ranking-factors.md:131来自说明文档打开原文件
**Training vs. search:** Some AI bots are used for both model training and search citation. If you want to be cited but don't want your content used for training, your options are limited — GPTBot handles both for OpenAI. However, you can safely block **CCBot** (Common Crawl) without affecting any AI search citations, since it's only used for training dataset collection.
references/platform-ranking-factors.md:147来自说明文档打开原文件
**Actions that help everywhere:**1. Allow all AI bots in robots.txt2. Implement schema markup (FAQPage, Article, Organization at minimum)3. Include statistics with named sources in your content
低风险

安装命令没有固定依赖版本

原文依据：3 处
发现了什么

安装命令没有指定依赖版本。同样的命令以后可能下载不同代码，你实际安装的内容可能与这次检查时不同。

为什么需要注意

即使命令和报告没变，以后安装时也可能下载到另一份代码。

主 Skill 主动引导用户使用该检查工具，引用页随后要求在整改前后运行它。`npx is-agentic` 未固定包版本；如果本机没有可信缓存，npx 可能从包仓库取得当时的版本并执行，因此未来运行的代码可能不同。材料没有提供版本、哈希或执行前审查步骤。用户可要求作者给出固定版本和校验方式，或改用不执行本地包的网页检查器。

SKILL.md:281来自说明文档打开原文件
**Audit this layer first**: [references/agent-readiness.md](references/agent-readiness.md) — the access/discovery/parseability checklist, free scoring tools (`npx is-agentic`, Frase's checker), Markdown content negotiation + `Link` headers, `llms-full.txt`, and the emerging agent-*actionable* layer (WebMCP).
查看另外 2 个位置
references/agent-readiness.md:9来自说明文档打开原文件
|---|---|---|| **Is Agentic** (Vercel + Ora) | `npx is-agentic yourdomain.com` or [is-agentic.com](https://is-agentic.com) | 100+ checks; Essential checks carry most of the score; Recommended checks activate only when evidence shows you have that surface (API, MCP server, commerce); not-applicable checks are excluded, not failed; includes an observed agent journey showing where a real agent hit friction || **Frase Agent Readiness Checker** | [frase.io/tools/agent-readiness](https://www.frase.io/tools/agent-readiness) | Access / Discovery / Parseability triad; 80+ = agents can reliably use the site, 60–79 = solid with gaps, <60 = real access problems |
references/agent-readiness.md:12来自说明文档打开原文件
Run one before and after any agent-readiness work — the score is a shareable artifact and the failed checks are your worklist. (Both are vendor tools with a product behind them; the *checks* are the value, not the pitch.)
会不会误导 AI 或隐藏内容？检查工作说明是否要求 AI 忽略你的指令、干扰检查结果，或夹带看不见的文字。未发现风险
会不会偷偷改推广链接或收款方？检查是否强制替换推广链接或收款对象，同时要求隐瞒更改。未发现风险

Skill 逻辑拆解

8 个说明模块

该 Skill 是一套 AI 搜索优化指导，目标是提高网站内容被 Google AI Overviews、ChatGPT、Perplexity 等系统检索和引用的概率。它要求先调查当前可见度、内容结构、业务目标和竞争情况。

查看原文
SKILL.md:10来自说明文档打开原文件
You are an expert in AI search optimization — the practice of making content discoverable, extractable, and citable by AI systems including Google AI Overviews, ChatGPT, Perplexity, Claude, Gemini, and Copilot. Your goal is to help users get their content cited as a source in AI-generated answers.
SKILL.md:17来自说明文档打开原文件
Gather this context (ask if not provided):

开始任务前，它会读取项目中的产品营销背景文件，并将其中内容用于后续建议。这可能包括定位、竞争对手和商业目标，但所提供源码没有指示将该文件发送到外部。

查看原文
SKILL.md:14来自说明文档打开原文件
**Check for product marketing context first:**If `.agents/product-marketing.md` exists (or `.claude/product-marketing.md`, or the legacy `product-marketing-context.md` filename, in older setups), read it before asking questions. Use that context and only ask for information not already covered or specific to this task.

主要输出是审计和内容建议，包括检查多个平台、内容可提取性、robots.txt、结构化数据，以及通过多次查询监测引用率。

查看原文
SKILL.md:116来自说明文档打开原文件
### Step 1: Check AI Answers for Your Key QueriesTest 10-20 of your most important queries across platforms:
SKILL.md:141来自说明文档打开原文件
### Step 3: Content Extractability CheckFor each priority page, verify:| Check | Pass/Fail ||-------|-----------|| Clear definition in first paragraph? | || Self-contained answer blocks (work without surrounding context)? | || Statistics with sources cited? | || Comparison tables for "[X] vs [Y]" queries? | || FAQ section with natural-language questions? | || Schema markup (FAQ, HowTo, Article, Product)? | || Expert attribution (author name, credentials)? | || Recently updated (within 6 months)? | || Heading structure matches query patterns? | || AI bots allowed in robots.txt? | |
SKILL.md:412来自说明文档打开原文件
AI answers are **non-deterministic** — one run is an anecdote, not a measurement. Run each query 3–5 times per platform and track the mention *rate* with its sample size ("cited 3/5, n=5"), comparing rates over time rather than single runs. Full rigor checklist in [references/format-volatility.md](references/format-volatility.md).

该 Skill 没有提供自动修改网站或删除文件的脚本；所给实现主要是文字说明、模板和外部工具建议。部分建议若由用户执行，会产生下列网络、代码执行和访问控制风险。

查看原文
SKILL.md:174来自说明文档打开原文件
## Optimization Strategy### The Three Pillars```1. Structure (make it extractable)2. Authority (make it citable)3. Presence (be where AI looks)```
SKILL.md:457来自说明文档打开原文件
## Tool IntegrationsFor implementation, see the [tools registry](../../tools/REGISTRY.md).| Tool | Use For ||------|---------|| `semrush` | AI Overview tracking, keyword research, content gap analysis || `ahrefs` | Backlink analysis, content explorer, AI Overview data || `gsc` | Search Console performance data, query tracking || `ga4` | Referral traffic from AI sources |
从这里开始 · 工作说明SKILL.md
ai-seo
连线表示工作说明包含的模块，不是实际运行顺序。点击模块可查看原文。 另有 5 个章节，可在原文件中查看。

文件引用关系图

16 处引用
哪些文件发起引用引用了什么
连线表示真实的文件引用，不是运行顺序。点击节点可高亮相关连线，并查看具体文件和原文位置。虚线表示还有文件需要定位。
文件与检查记录10 个文件

检查范围与遗漏

逐文件查看涉及的内容

下方列出本次涉及的原文范围；纳入检查不代表已查清所有问题。

  • SKILL.md已纳入全文
  • references/agent-readiness.md已纳入全文
  • references/citations-vs-recommendations.md已纳入全文
  • references/content-patterns.md已纳入全文
  • references/content-types.md已纳入全文
  • references/format-volatility.md已纳入全文
  • references/okf.md已纳入全文
  • references/platform-ranking-factors.md已纳入全文
  • references/youtube-ai-citations.md已纳入全文
  • evals/evals.json已纳入全文

这份报告只针对上方版本。我们看了拿到的代码和说明文件，没有实际运行 Skill，也没有检查它另外安装的软件包。因此，这不是“保证安全”的承诺；换了版本或使用环境，结果也可能不同。

  • SKILL.md工作说明
  • evals/evals.json配套文件
  • references/agent-readiness.md配套文件
  • references/citations-vs-recommendations.md配套文件
  • references/content-patterns.md配套文件
  • references/content-types.md配套文件
  • references/format-volatility.md配套文件
  • references/okf.md配套文件
  • references/platform-ranking-factors.md配套文件
  • references/youtube-ai-citations.md配套文件

代码和说明中提到的操作

连接外部网站
SKILL.md:73来自说明文档打开原文件
**Google's position** ([AI features optimization guide](https://developers.google.com/search/docs/fundamentals/ai-optimization-guide)):> "The best practices for SEO continue to be relevant because our generative AI features on Google Search are rooted in our core Search ranking and quality systems."
SKILL.md:319来自说明文档打开原文件
**`/llms.txt`** — Context file for AI systems (see [llmstxt.org](https://llmstxt.org))
SKILL.md:325来自说明文档打开原文件
Google [introduced OKF](https://cloud.google.com/blog/products/data-analytics/how-the-open-knowledge-format-can-improve-data-sharing) in June 2026 — a markdown spec for representing site content as a directory of cross-linked files with YAML frontmatter, agent-readable without scraping. Built primarily for data-team catalog metadata; the site-readable-by-agents repurposing was popularized by Suganthan Mohanadasan. No confirmed AI-search ranking signal today — treat it as protocol-layer registration like early schema.org. **For the full breakdown, implementation paths (free generator, WordPress plugin, by-hand), hosting guidance, and when to skip, see [references/okf.md](references/okf.md).**
读取文件
SKILL.md:85来自说明文档打开原文件
- They actively reward extractable structure — passages, FAQs, comparison tables, definition blocks- They parse `llms.txt`, structured pricing pages, and machine-readable files when present- They cite third-party sources (Reddit, Wikipedia, review sites) more heavily than top-ranked pages
SKILL.md:91来自说明文档打开原文件
- For Google AI Overviews / AI Mode specifically: optimize for people and core Search, full stop. Strong E-E-A-T, original information, semantic HTML, clean indexability.- For ChatGPT/Claude/Perplexity: layer on the extractable structure + llms.txt + machine-readable files.
SKILL.md:273来自说明文档打开原文件
### Machine-Readable Files for AI Agents
读取密钥或账号配置
SKILL.md:153来自说明文档打开原文件
| Schema markup (FAQ, HowTo, Article, Product)? | || Expert attribution (author name, credentials)? | || Recently updated (within 6 months)? | |
SKILL.md:233来自说明文档打开原文件
**Expert attribution** (+25-30% citation boost)- Named authors with credentials- Expert quotes with titles and organizations
references/content-patterns.md:246来自说明文档打开原文件
- Cite peer-reviewed studies with publication details- Include expert credentials (MD, RN, etc.)- Note study limitations and context
安装其他软件包
SKILL.md:281来自说明文档打开原文件
**Audit this layer first**: [references/agent-readiness.md](references/agent-readiness.md) — the access/discovery/parseability checklist, free scoring tools (`npx is-agentic`, Frase's checker), Markdown content negotiation + `Link` headers, `llms-full.txt`, and the emerging agent-*actionable* layer (WebMCP).
evals/evals.json:119来自说明文档打开原文件
      "prompt": "Our content is well-written and we have schema markup, but AI assistants never seem to use our site. Someone said our site might not be 'agent-ready.' We also put most of our AI-visibility effort into Reddit this year since …      "expected_output": "Should load references/agent-readiness.md and address both halves. (1) Agent readiness: recommend running a free scoring tool (npx is-agentic and/or Frase's Agent Readiness Checker) and walk the access/discovery/parseability triad — core content must be in the initial HTML without JavaScript execution, no bot challenge/firewall blocking AI crawlers, robots.txt with an explicit AI-crawler stance, clean sitemap, llms.txt (+llms-full.txt as bonus), structured data, and a Markdown representation via content negotiation (Accept: text/markdown at the same canonical URL) or a Link header. May mention WebMCP as the emerging agent-actionable layer, labeled emerging. (2) Reddit concentration: flag citation-source volatility — ChatGPT's Aug 2026 retrieval changes nearly wiped Reddit as a source (practitioner-reported), so single-surface concentration is fragile; recommend the portfolio approach across third-party surfaces plus owned-site fundamentals (which dominate Gemini citations), and verifying any citation-share stat against their own monitoring before betting budget.",      "assertions": [
references/agent-readiness.md:9来自说明文档打开原文件
|---|---|---|| **Is Agentic** (Vercel + Ora) | `npx is-agentic yourdomain.com` or [is-agentic.com](https://is-agentic.com) | 100+ checks; Essential checks carry most of the score; Recommended checks activate only when evidence shows you have that surface (API, MCP server, commerce); not-applicable checks are excluded, not failed; includes an observed agent journey showing where a real agent hit friction || **Frase Agent Readiness Checker** | [frase.io/tools/agent-readiness](https://www.frase.io/tools/agent-readiness) | Access / Discovery / Parseability triad; 80+ = agents can reliably use the site, 60–79 = solid with gaps, <60 = real access …
读取了多少行
1,549
文件校验值（用于核对版本）
424cd2d4dc76476121e046655d70eb9024bfff37ab0d549a6b4e6af31b6add16