seo-in-nextjs

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

Purpose and capabilities are coherent for a Next.js SEO guide, and the flagged command/data-exfiltration patterns are documentation artifacts. The main issue is install trust: a paid .tgz fetched from Ko-fi and installed locally is an unverifiable distribution path for the core dependency, which makes the skill suspicious from a supply-chain perspective even without evidence of active malicious behavior.

Confidence: 91%Severity: 72%
Audit Metadata
Analyzed At
Sep 15, 2026, 04:27 PM
Package URL
pkg:socket/skills-sh/dlcastillop%2Fagent-skills%2Fseo-in-nextjs%2F@56a7313f4a36b5fcb9e8e44fc541b817be8ef5f7c3746e6233147f5e0083e049