seo-geo

SUSPICIOUS. The core skill is largely benign and well-aligned with GEO/AI-search auditing, using public website data and local report generation. The main risk is the optional DataForSEO MCP path: if implemented via a third-party, non-vendor MCP server, it forwards DataForSEO credentials to outside code and increases supply-chain and credential exposure risk. Without that optional integration, the skill is low-to-moderate risk; with third-party MCP use, risk becomes medium/high.