seo-in-nextjs
Warn
Audited by Socket on Sep 15, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
Purpose and capabilities are coherent for a Next.js SEO guide, and the flagged command/data-exfiltration patterns are documentation artifacts. The main issue is install trust: a paid .tgz fetched from Ko-fi and installed locally is an unverifiable distribution path for the core dependency, which makes the skill suspicious from a supply-chain perspective even without evidence of active malicious behavior.
Confidence: 91%Severity: 72%
Audit Metadata