claude-seo v2.2.0
Security, cross-platform, and data-accuracy release. This is the first public ship of the v2.1.0 knowledge-currency content together with the full open-issue and PR backlog and a post-audit hardening pass. No breaking changes: every v2.0.0 command, script signature, and skill entry point still works.
Highlights
- Security. Closed an install-time credential-injection vector across every extension installer, uninstaller, and config probe; rejected SSRF authority-confusion bypasses at parse time for all callers (#110); moved Google and Bing API keys out of request URLs and error output; fixed cross-platform SecureString handling in the Windows installers; and added a secret-scan CI gate. The full git history and tracked tree are verified secret-free.
- Data accuracy. GSC site totals no longer report a false "0 clicks" for low-volume queries (#130).
- Extensions that actually run. The Unlighthouse extension was calling a non-existent npm package and the Ahrefs extension an invalid binary; both now point at real, pinned packages.
- Completeness. The seo-cluster interactive template now ships (it was excluded by an over-broad ignore rule), and 82 dead links across the FLOW prompt library were repaired and made durable against future syncs.
- Currency, folded in from 2.1.0. AI Mode is modeled as a distinct citation engine from AI Overviews; the May 7, 2026 FAQ rich result retirement and Google I/O 2026 are reflected across the schema and GEO guidance.
Quality gates
326 tests passing, portability lint 0/0/0, secret-scan clean, no shipped dead links.
Install
/plugin marketplace add AgriciDaniel/claude-seo
/plugin install claude-seo@agricidaniel-claude-seo
AI Marketing Hub Pro members can install the community build instead: swap AgriciDaniel/claude-seo for AI-Marketing-Hub/claude-seo and the slug for claude-seo@ai-marketing-hub-claude-seo.
Thanks
Community fixes from @Fushuling (#110), @webgunnz (#122), and @fayerman-source (#103, #104, #130), plus Dependabot dependency floor bumps. Full details in CHANGELOG.md.