index-watch

Warn

Audited by Socket on Jul 11, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s purpose and guidance are coherent with Search Console monitoring, but it requires an unverifiable `seo` CLI and likely forwards Google credentials to that opaque binary. With no public provenance, install path, or documented direct-to-Google data flow, the main risk is supply-chain and credential handling rather than confirmed malware.

Confidence: 85%Severity: 82%
Audit Metadata
Analyzed At
Jul 11, 2026, 04:36 PM
Package URL
pkg:socket/skills-sh/iannuttall%2Fseo%2Findex-watch%2F@49703105e45bbf61f6b4e7de7488e1d9911a6e5a4b5abbcc6ca4d78e881b464a
Security Audit — socket — index-watch