geo-optimizer
Warn
Audited by Socket on Sep 25, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The core SEO/GEO auditing behavior is coherent and proportionate, with no obvious credential harvesting or exfiltration. The main issue is the unnecessary transitive trust hop: it encourages installing an additional skill from a third-party personal GitHub repository via the Skills CLI, creating medium supply-chain risk even though the command style itself is ecosystem-consistent.
Confidence: 88%Severity: 56%
Audit Metadata