citedy-seo-agent
Citedy SEO Agent automates content marketing by scouting trends, analyzing competitors, and generating SEO-optimized articles in 55 languages.
Install this skill
Security score
The citedy-seo-agent skill was audited on May 26, 2026 and we found 52 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Webhook reference - potential data exfiltration
| 70 | - Register webhook endpoints to receive real-time event notifications (article published, ingestion complete, etc.) |
Webhook reference - potential data exfiltration
| 71 | - List or delete webhook endpoints, view webhook delivery history |
Webhook reference - potential data exfiltration
| 640 | "callback_url": "https://your-server.com/webhook" |
Webhook reference - potential data exfiltration
| 1084 | - Fires `article.published` webhook event. |
Webhook reference - potential data exfiltration
| 1098 | - Fires `article.unpublished` webhook event. |
Webhook reference - potential data exfiltration
| 1109 | - Fires `article.deleted` webhook event. |
Webhook reference - potential data exfiltration
| 1195 | | `/api/agent/webhooks` | POST | free | |
Webhook reference - potential data exfiltration
| 1196 | | `/api/agent/webhooks` | GET | free | |
Webhook reference - potential data exfiltration
| 1197 | | `/api/agent/webhooks/{id}` | DELETE | free | |
Webhook reference - potential data exfiltration
| 1198 | | `/api/agent/webhooks/deliveries` | GET | free | |
Webhook reference - potential data exfiltration
| 1204 | ## Webhooks |
Webhook reference - potential data exfiltration
| 1206 | Webhooks let Citedy push real-time event notifications to your server instead of polling. |
Webhook reference - potential data exfiltration
| 1208 | ### Register a Webhook Endpoint |
Webhook reference - potential data exfiltration
| 1211 | POST /api/agent/webhooks |
Webhook reference - potential data exfiltration
| 1213 | "url": "https://your-server.com/webhooks/citedy", |
Webhook reference - potential data exfiltration
| 1215 | "description": "Production webhook" |
Webhook reference - potential data exfiltration
| 1227 | ### List Webhook Endpoints |
Webhook reference - potential data exfiltration
| 1230 | GET /api/agent/webhooks |
Webhook reference - potential data exfiltration
| 1233 | - 0 credits. Returns `{ webhooks: [...] }`. |
Webhook reference - potential data exfiltration
| 1235 | ### Delete Webhook Endpoint |
Webhook reference - potential data exfiltration
| 1238 | DELETE /api/agent/webhooks/{id} |
Webhook reference - potential data exfiltration
| 1243 | ### Webhook Delivery History |
Webhook reference - potential data exfiltration
| 1246 | GET /api/agent/webhooks/deliveries?status=delivered&limit=20&offset=0 |
Webhook reference - potential data exfiltration
| 1274 | Every webhook delivery sends a JSON `WebhookEventEnvelope`: |
Webhook reference - potential data exfiltration
| 1314 | throw new Error("Invalid webhook signature"); |
Webhook reference - potential data exfiltration
| 1322 | ### Webhooks vs Polling |
Webhook reference - potential data exfiltration
| 1324 | | Use webhooks when... | Use polling when... | |
External URL reference
| 35 | privacy_policy_url: https://www.citedy.com/privacy |
External URL reference
| 46 | Base URL: `https://www.citedy.com` |
External URL reference
| 99 | POST https://www.citedy.com/api/agent/register |
External URL reference
| 110 | "approval_url": "https://www.citedy.com/approve-agent/...", |
External URL reference
| 134 | "url": "https://www.citedy.com/register?ref=ABC123XZ" |
External URL reference
| 150 | 2. `POST /api/agent/autopilot` with `{ "source_urls": ["https://..."] }` — wait for response — get `article_id` |
External URL reference
| 174 | 1. `POST /api/agent/ingest` with `{ "url": "https://youtube.com/watch?v=abc123" }` → get `id` |
External URL reference
| 207 | > User: "Write an article based on this: https://example.com/ai-trends" |
External URL reference
| 209 | 1. `POST /api/agent/autopilot` with `{ "source_urls": ["https://example.com/ai-trends"], "size": "mini" }` |
External URL reference
| 280 | Base URL: `https://www.citedy.com` |
External URL reference
| 319 | "competitor_urls": ["https://competitor1.com", "https://competitor2.com"], |
External URL reference
| 340 | {"domain": "https://competitor.com", "mode": "fast|ultimate"} |
External URL reference
| 368 | "source_urls": ["https://example.com/article"], |
External URL reference
| 606 | "url": "https://youtube.com/watch?v=abc123" |
External URL reference
| 639 | "urls": ["https://example.com/article1", "https://example.com/article2"], |
External URL reference
| 640 | "callback_url": "https://your-server.com/webhook" |
External URL reference
| 787 | "avatar_url": "https://download.citedy.com/agent/avatars/...", |
External URL reference
| 810 | "video_urls": ["https://download.citedy.com/...", "https://download.citedy.com/..."], |
External URL reference
| 820 | - `video_urls` — 2-4 URLs (must start with `https://download.citedy.com/`). Count must equal `phrases` count |
External URL reference
| 831 | "video_url": "https://download.citedy.com/agent/shorts/.../video-sub.mp4", |
External URL reference
| 1213 | "url": "https://your-server.com/webhooks/citedy", |
External URL reference
| 1220 | - `url` — must be `https://` in production |
External URL reference
| 1288 | "article_url": "https://yourblog.citedy.com/how-ai-changes-seo", |
External URL reference
| 1368 | | 402 | Insufficient credits | Tell user to top up at https://www.citedy.com/dashboard/billing | |
External URL reference
| 1388 | _https://www.citedy.com_ |