ai-seo

SUSPICIOUS: the core SEO guidance is coherent, and DataForSEO traffic goes to an official vendor endpoint, but the skill also instructs users to clone and run an unpinned third-party GSC MCP server that may receive Google credentials. This is not confirmed malware, but it is a medium-to-high security risk due to supply-chain exposure and credential forwarding beyond what a simple SEO workflow skill should require.