AI-Powered Meta Description Writer

Warn

Audited by Socket on Mar 28, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s stated purpose is coherent with SEO metadata automation, but the install path is the main issue: it relies on transitive third-party skill registries with weakly verified provenance, no pinning, and no checksum/signature evidence. No confirmed malicious behavior or credential theft is shown, but the installation trust model is disproportionally weak for a skill that would likely receive OpenAI, WordPress, and Search Console credentials.

Confidence: 84%Severity: 74%
Audit Metadata
Analyzed At
Mar 28, 2026, 05:48 PM
Package URL
pkg:socket/skills-sh/agentskillexchange%2Fskills%2Fai-powered-meta-description-writer%2F@254e565934f2ceb0b01f27d0138ee65e475ec017