claude-code-seo-content-marketing-suite

SUSPICIOUS. The skill’s stated SEO purpose matches most requested capabilities and credentials, but the install path is the main problem: it is distributed from an unrelated personal GitHub repo with no pinning or release verification, while branding suggests ara.so/Anthropic lineage. Data flows appear mostly proportionate to SEO work and there is no clear credential-harvesting or exfiltration endpoint, so this is not confirmed malware; however, the supply-chain trust gap makes the skill medium-high risk.