performance

Warn

Audited by Socket on Jul 11, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS due to a required but unverified `seo` CLI/MCP and API-key forwarding to that tool. The stated purpose is legitimate and narrowly scoped, but install trust and endpoint provenance are not established in the skill text, so the main risk is black-box credential and network handling rather than confirmed malicious intent.

Confidence: 82%Severity: 82%
Audit Metadata
Analyzed At
Jul 11, 2026, 04:36 PM
Package URL
pkg:socket/skills-sh/iannuttall%2Fseo%2Fperformance%2F@e3f4700c4021033b32f03e4e17779952faddc160af3d2a1527c1fb3838b4e4df