High-Star SEO Skill Caught Sneaking Self-Promo Backlinks
jasoncola1 · reddit · 2026-07-17
While using Claude Code to build SEO/GEO tools, a developer discovered hidden self-promotion in claude-seo, a GitHub repository boasting 11.5k stars.\n\nThe project's skill file (SKILL.md, line 119) contains an undisclosed instruction: it commands the AI agent to automatically append the author's Skool community promotional link to the end of the output after executing any of 15 different SEO audit commands.\n\nThis means that using this tool for client projects would unknowingly generate backlinks for the original author with every delivery. The poster warns the community that GitHub stars and fork ratios are no substitute for thorough source code security reviews, urging users to perform comprehensive scans before installing any third-party skills.
More from coding & agent
- Cognition's SWE-2 uses a KKT duality argument in RL to shift the effort Pareto curve — YouJiacheng · 2026-09-11
- First-ever Three.js Conference lands in Paris, with a panel on AI-shortened design workflows — OdinLovis · 2026-09-11
- Data engineering, not agent frameworks, is the real bottleneck for enterprise AI agents — dhruv2038 · 2026-09-11
- RTK Terminal Compression Cuts Tokens but Leaves Your AI Coding Bill Unchanged — Bartaseth · 2026-09-11
- GPT-6 Astra beats Factorio with enemies in 44 in-game hours at ~$4,500 API cost — liminal_bardo · 2026-09-11
- Investment Analyst Asks How to Build a Claude-Based Diligence Agent Stack — Careless_Tie2286 · 2026-09-11