phase-7-seo-security
Skill for search optimization (SEO) and security hardening. Covers meta tags, semantic HTML, and security vulnerability checks. Use proactively when user asks about search ranking or security. Triggers: SEO, security, meta tags, XSS, CSRF, 보안, 검색 최적화, セキュリティ, SEO, 安全, 搜索优化, seguridad, SEO, sécurité, SEO, Sicherheit, SEO, sicurezza, SEO Do NOT use for: backend-only APIs, internal tools
来源信息
- 仓库
- ww-w-ai/bkit-gemini
- 最近来源活动
- 2026年3月11日 04:41
- 检测到的 SKILL.md 语言
- 英语
- 星标
- 66
- 分支
- 16
安装方式
默认使用会先检查来源的 Prompt；你也可以切换为直接命令，或下载本地副本。
检查来源文件
决定是否安装前，请先阅读 SKILL.md，以及 SkillsMP 当前展示的配套文件。
正在显示 SKILL.md
SKILL.md
来源说明 · 只读预览- name
- phase-7-seo-security
- classification
- C
- description
- Skill for search optimization (SEO) and security hardening. Covers meta tags, semantic HTML, and security vulnerability checks. Use proactively when user asks about search ranking or security. Triggers: SEO, security, meta tags, XSS, CSRF, 보안, 검색 최적화, セキュリティ, SEO, 安全, 搜索优化, seguridad, SEO, sécurité, SEO, Sicherheit, SEO, sicurezza, SEO Do NOT use for: backend-only APIs, internal tools
- user-invocable
- true
- argument-hint
- allowed-tools
- ["read_file","write_file","replace","glob","grep_search","google_web_search"]
- imports
- []
- agents
- {"security":"security-architect"}
- context
- session
- memory
- project
- pdca-phase
- check
# Phase 7: SEO & Security
> Optimize for search and secure your application
## SEO Checklist
### 1. Meta Tags
```typescript
// app/layout.tsx
export const metadata: Metadata = {
title: {
template: '%s | My App',
default: 'My App - Best Product'
},
description: 'Description for search engines',
keywords: ['keyword1', 'keyword2'],
openGraph: {
title: 'My App',
description: 'Description for social sharing',
images: ['/og-image.png']
},
twitter: {
card: 'summary_large_image'
}
};
```
### 2. Semantic HTML
- Use proper heading hierarchy (h1 → h2 → h3)
- Add alt text to images
- Use semantic elements (article, section, nav)
- Implement structured data (JSON-LD)
### 3. Performance
- Image optimization (next/image)
- Code splitting
- Lazy loading
- Core Web Vitals monitoring
## Security Checklist
### 1. Headers
```typescript
// next.config.js
const securityHeaders = [
{ key: 'X-Frame-Options', value: 'DENY' },
{ key: 'X-Content-Type-Options', value: 'nosniff' },
{ key: 'Strict-Transport-Security', value: 'max-age=31536000' },
{ key: 'Content-Security-Policy', value: "default-src 'self'" }
];
```
### 2. Input Validation
- Validate all user inputs
- Sanitize HTML content
- Use parameterized queries
- Implement rate limiting
### 3. Authentication
- Secure password hashing
- JWT token expiration
- CSRF protection
- Session management
## Next Phase
After completion: `/phase-8-review`
在 GitHub 查看