social-metadata-hardening
Enhances social sharing previews by fixing metadata for rich cards on platforms like Facebook, LinkedIn, and Twitter.
Install this skill
Security score
The social-metadata-hardening skill was audited on Jun 3, 2026 and we found 19 security issues across 4 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 60 | const imageUrl = image?.startsWith('http') ? image : `${baseUrl}${image}`; |
Template literal with variable interpolation in command context
| 61 | const pageUrl = `${baseUrl}${path}`; |
Template literal with variable interpolation in command context
| 122 | title: `${post.title} | My Blog`, |
Template literal with variable interpolation in command context
| 124 | path: `/blog/${params.slug}`, |
Curl to non-GitHub URL
| 160 | curl -sI https://www.yourdomain.com/images/og/home.jpg | grep -i "content-type\|content-length\|status" |
Curl to non-GitHub URL
| 196 | curl -s https://www.yourdomain.com/blog/my-post | grep -i "og:\|twitter:" |
Access to .env file
| 57 | const baseUrl = process.env.NEXT_PUBLIC_BASE_URL || 'https://www.yourdomain.com'; |
External URL reference
| 57 | const baseUrl = process.env.NEXT_PUBLIC_BASE_URL || 'https://www.yourdomain.com'; |
External URL reference
| 134 | metadataBase: new URL('https://www.yourdomain.com'), // REQUIRED for absolute URLs |
External URL reference
| 160 | curl -sI https://www.yourdomain.com/images/og/home.jpg | grep -i "content-type\|content-length\|status" |
External URL reference
| 168 | - Caches aggressively — use the [Sharing Debugger](https://developers.facebook.com/tools/debug/) to force recrawl |
External URL reference
| 175 | - Use the [Card Validator](https://cards-dev.twitter.com/validator) to test |
External URL reference
| 178 | - Caches hard — use [Post Inspector](https://www.linkedin.com/post-inspector/) to refresh |
External URL reference
| 196 | curl -s https://www.yourdomain.com/blog/my-post | grep -i "og:\|twitter:" |
External URL reference
| 204 | | Facebook | https://developers.facebook.com/tools/debug/ | |
External URL reference
| 205 | | LinkedIn | https://www.linkedin.com/post-inspector/ | |
External URL reference
| 206 | | Twitter/X | https://cards-dev.twitter.com/validator | |
External URL reference
| 207 | | General | https://metatags.io | |
External URL reference
| 218 | - [ ] OG image URLs are absolute (start with `https://`) |