Ahrefs Backlink Content Planner

Warn

Audited by Socket on Mar 28, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The claimed Ahrefs backlink-planning purpose is plausible and proportionate, but the install path relies on transitive remote skill installation from an unverifiable third-party namespace with unpinned versions and limited provenance evidence. No direct malicious behavior is shown, yet the supply-chain trust gap is significant enough to treat this as medium-high risk until the exact repo, source contents, and Ahrefs data flows are independently verified.

Confidence: 82%Severity: 74%
Audit Metadata
Analyzed At
Mar 28, 2026, 05:47 PM
Package URL
pkg:socket/skills-sh/agentskillexchange%2Fskills%2Fahrefs-backlink-content-planner%2F@109e5205dbce41268e7577d2724f7be9a2a8f4ce
Security Audit — socket — Ahrefs Backlink Content Planner