Community code plugin. Review compatibility and verification before install.
Latest release: v1.0.0Download zip
Capabilities
Compatibility
Security Scan
OpenClaw
Suspicious
high confidencePurpose & Capability
Core behavior is coherent for SEO keyword research: it crawls user-provided sites, calls AIsa/DataForSEO endpoints, and uses an AISA_API_KEY. The concern is that multiple manifests also say to use it for general web search, research, source discovery, or content extraction, which is broader than the SEO purpose.
Instruction Scope
The bundled skill has good SEO-specific workflow limits, but the manifest and command descriptions include broad activation language that may cause over-invocation outside keyword research.
Install Mechanism
The package ships a native OpenClaw manifest, a small inert index.js wrapper, a Claude-compatible manifest, markdown instructions, and Python helper scripts. I found no install hooks, dependency materialization, or automatic execution path.
Credentials
The declared AISA_API_KEY, python3 requirement, and api.aisa.one network target fit the stated AIsa integration. The local crawler also fetches user-provided websites, which is disclosed in the skill instructions but not reflected as a bounded network target in the manifest.
Persistence & Privilege
No background persistence, privilege escalation, or credential-store access was found. The scripts can read prompt/payload files and write output files when directed, which is expected for a CLI research workflow.
Scan Findings in Context
[LP3] expected: The file read/write behavior is limited to user-supplied payload, prompt, and output paths in helper scripts and is expected for generating local research artifacts; however, the manifest could document these local file effects more explicitly.
[SQP-1] unexpected: This concern is supported by artifact text: package, plugin, README, and skill descriptions repeatedly include generic web search, research, source discovery, or content extraction as triggers, which is broader than SEO keyword research and can expand third-party data exposure.
[SQP-3] expected: Defaulting to United States and English is disclosed in the workflow and is mainly a consent and accuracy issue, not evidence of malicious behavior; users should confirm market and language before external queries.
What to consider before installing
Install only if you intend to use AIsa for SEO keyword research and are comfortable sending supplied domains, crawled page content, keyword data, competitor names, and prompts to api.aisa.one. Avoid using it as a general web research or content extraction tool, confirm country and language before running queries, and treat generated output files as potentially sensitive business strategy.Verification
Tags
Seo Keyword Research Plugin
ClawHub/OpenClaw native-first plugin wrapper for the packaged AIsa skill.
Runtime Requirements
- Required bins:
python3 - Required env vars:
AISA_API_KEY - Primary env:
AISA_API_KEY - Network targets:
https://api.aisa.one
What It Ships
- Bundle plugin id:
seo-keyword-research-plugin - Native manifest:
openclaw.plugin.json - Native entrypoint:
index.js - Embedded skill:
skills/seo-keyword-research/SKILL.md - Format: native OpenClaw plugin plus Claude-compatible bundle fallback
Why This Format
- Uses the OpenClaw-native manifest path that current plugin docs expect.
- Keeps the packaged skill payload intact under
skills/for ClawHub/OpenClaw skill loading. - Retains
.claude-plugin/plugin.jsonso Claude-compatible marketplace tooling still recognizes the package. - Reuses the already-hardened
clawhub-release/skill payload.
Provenance
- Source repository:
https://github.com/baofeng-tech/agent-skills-io - Embedded skill path:
skills/seo-keyword-research/SKILL.md - The runtime behavior remains inside the packaged skill payload and its public docs.
Install After Publishing
openclaw plugins install clawhub:seo-keyword-research-plugin
Publish Locally
clawhub package publish ./plugins/seo-keyword-research-plugin --dry-run
clawhub package publish ./plugins/seo-keyword-research-plugin
Notes
- Runtime requirements and guardrails remain inside
skills/seo-keyword-research/SKILL.md. - If both native and bundle markers exist, OpenClaw prefers the native plugin path.
- This package keeps side effects explicit and relies on the packaged skill's repo-local defaults where applicable.
