measure-change

SUSPICIOUS rather than malicious. The skill’s purpose and capabilities are coherent for SEO measurement, and the text shows no direct credential theft, prompt injection, or exfiltration behavior. The main issue is trust: it depends on an unverified external `seo` CLI/MCP tool with unspecified publisher, install provenance, and credential/data handling, which makes the overall security risk high despite otherwise aligned functionality.