seo-audit

SUSPICIOUS: The core SEO-audit behavior is largely aligned with the stated purpose, and the webmaster/search-console scopes are proportionate. The main concerns are intermediary data routing through Cogny-hosted MCP endpoints, broader-than-needed Bash/Write permissions, and same-org but unpinned raw GitHub install practices at the skill-pack level. This looks more like a legitimate but trust-heavy managed integration than overtly malicious behavior.