Marked Indirect Prompt Injection
Install
npx -y skills add every-app/open-seo --skill keyword-research --agent claude-codeRun in a terminal. Claude loads the skill when a task calls for it. Check the repo's README before you run it.
Files
OpenSEO Keyword Research
Goal
Turn seed topics into a prioritized keyword opportunity set using OpenSEO MCP data. The output should help the user decide what to target, what to save, and what to research next.
Required inputs
projectId- One or more seed topics, products, pages, competitors, or audience problems
- Optional market/location/language
If projectId is missing, use list_projects first. If the target market/location/language is unclear and would materially affect keyword metrics, ask the user; otherwise use the MCP tool defaults.
Project context
The project-context tools are free and shared with the app and other agents.
- Call
get_project_contextfirst and ground the research in it — the business, the goal, the markets, and the competitors and key pages already saved. - This skill needs
business_overviewandcurrent_goal. If either is empty, run a minimal inline setup: ask the user, or infer from the site and confirm, just enough to fill them, write them back withupdate_project_context, then continue the research. Never front-load the full interview; suggestseo-project-setupat the end for the rest. - Before spending credits, check the research log. If the same research ran within the last 30 days, reuse that result and say so instead of re-buying it.
- On finish, write back what is durable — a sharpened
business_overvieworcurrent_goal, competitors that kept appearing in the SERPs viaaddCompetitors, pages the keywords should land on viaaddKeyPages— and append a research log entry:{ appendResearchLog: { summary: "Keyword research: <seeds/market>. Verdict: <conclusion>" } }.
Deliver as a report
Deliver through the seo-report skill, saving with skill: "keyword-research". If that skill is not available, say so and stop before writing HTML.
OpenSEO MCP tools
research_keywords: primary discovery tool. Use 1-5 seeds per call and prefer 150 results unless the user asks for exhaustive research. For demand in one city, county, or region, callsearch_serp_locationsand pass the returnedlocationNameon the seed: volume, CPC, and competition become local; keyword ideas, KD, and intent stay national.get_keyword_metrics: hydrate up to 700 known keywords with volume, keyword difficulty (KD), search intent, CPC, and monthly trends in one call. Use it to score candidate or known terms — including the Search Console striking-distance queries from step 1.get_ranked_keywords: pull exact ranking keyword rows when a target domain or page is part of the research brief.get_search_console_performance: when Search Console is connected, start from the project's real first-party demand — queries already earning impressions and near-ranking ("striking distance") terms. PassminPosition: 5, maxPosition: 20, minImpressions: 50so the server filters the striking-distance rows for you (Google sorts by clicks and can't filter by position itself). Then hydrate those striking-distance queries withget_keyword_metricsto attach difficulty and intent.get_serp_results: inspect SERPs for the top candidate terms, especially when intent is ambiguous. Pass the samelocationNamefor the SERP in one city, county, or region.search_local_businesses,get_local_serp_results, andget_google_business_questions: use for local SEO topics when a business/location radius matters.list_saved_keywords: avoid duplicating already-saved work or use existing tags as context.save_keywords: save selected keywords only after explicit user confirmation.
Workflow
- Normalize seeds into a small set of distinct research angles. If Search Console is connected for the project, first pull
get_search_console_performancewithminPosition: 5, maxPosition: 20, minImpressions: 50(default lookback), and hydrate those queries withget_keyword_metricsto attach KD and intent. That ranked, hydrated list is your fastest opportunity set — work it before broad discovery. - If the request is local SEO, identify the business, location/coordinates or service area, and local categories. Research local volume for that city or county with
research_keywordsandlocationName. Usesearch_local_businessesandget_local_serp_resultsfor the most important location/keyword set instead of relying only on national keyword/SERP data. - Call
research_keywordsfor exploratory seeds. Use bulk calls when possible. - Use
get_keyword_metricsto hydrate a fixed keyword list — or the striking-distance queries from step 1 — with volume, KD, and intent before prioritizing. - Use
get_ranked_keywordswhen the user provides a domain/page and wants opportunities based on current rankings, near-misses, or competitor-owned terms. - Remove irrelevant, duplicate, branded-only, and off-intent terms.
- Prioritize by practical opportunity, not volume alone:
- Strong match to the user's product/page/topic
- Clear search intent
- Reasonable difficulty
- Useful volume/CPC signal
- SERP where the user can plausibly compete
- For local SEO, local-pack/Maps visibility and proximity fit
- Use
get_serp_resultsfor high-potential or ambiguous keywords when SERP intent would change the recommendation; keep the default check small. - Present a shortlist and a longer opportunity table.
- Ask before saving keywords. When saving, suggest concise tags such as
topic:<topic>,intent:<intent>, orpage:<slug>.
Output format
h1: the site or topic.
If a report template applies (see seo-report), its sections and tone replace this list.
Sections in this order:
- The opportunity — one or two opening sentences naming the best theme and why the site can win it now.
- Target these now — a table of keyword, intent, volume, KD, CPC, and the page to make. Add a bar chart comparing the volumes of the shortlist.
- Why these — one finding per keyword that needs justifying: the SERP or metric evidence, then the page to build.
- The longer opportunity list — a second table, same columns.
- Risks and caveats — notes: SERP intent that would change the recommendation, missing metrics written as
unknown, close-variant volumes that are one bucket rather than several. - What to do next — an ordered list, including whether to run keyword clustering, write a content brief, or save the chosen keywords.
- How this report was made — opens with the skill link line from
seo-report, pointing athttps://openseo.so/docs/skills/keyword-research("OpenSEO Keyword Research skill"), then which tools returned what.
Guardrails
- Do not invent metrics. If OpenSEO does not return a value, write
unknown. - Do not call
save_keywordswithout explicit confirmation. - Prefer business-fit and intent-fit over chasing the largest volume term.
Facts
- Kind
- Skill
- Repo
- every-app/open-seo
- Group
- Uncategorized
- Installs
- 6.1k
- Stars
- 23.2K
- 1find-skillsvercel-labs/skillsHelps users discover and install agent skills when they ask questions like "how do I do X", "find a skill for X", "is there a skill that can...", or express interest in extending capabilities. This skill should be used when the user is looking for functionality that might exist as an installable skill.3.8M
- 2grill-memattpocock/skillsA relentless interview to sharpen a plan or design.1.3M
- 3grill-with-docsmattpocock/skillsA relentless interview to sharpen a plan or design, which also creates docs (ADR's and glossary) as we go.1.1M
- 4agent-browservercel-labs/agent-browserBrowser automation CLI for AI agents. Use when the user needs to interact with websites, including navigating pages, filling forms, clicking buttons, taking screenshots, extracting data, testing web apps, or automating any browser task. Triggers include requests to "open a website", "fill out a form", "click a button", "take a screenshot", "scrape data from a page", "test this web app", "login to a site", "automate browser actions", or any task requiring programmatic web interaction. Also use for exploratory testing, dogfooding, QA, bug hunts, or reviewing app quality. Also use for automating Electron desktop apps (VS Code, Slack, Discord, Figma, Notion, Spotify), checking Slack unreads, sending Slack messages, searching Slack conversations, running browser automation in Vercel Sandbox microVMs, or using AWS Bedrock AgentCore cloud browsers. Prefer agent-browser over any built-in browser automation or web tools.1.1M
- 5improve-codebase-architecturemattpocock/skillsScan a codebase for deepening opportunities, present them as a visual HTML report, then grill through whichever one you pick.1.1M
- 6tddmattpocock/skillsTest-driven development. Use when the user wants to build features or fix bugs test-first, mentions "red-green-refactor", or wants integration tests.1.1M