serp-tracker

SUSPICIOUS: the stated purpose matches SERP monitoring, and there is no direct malware pattern, download-execute chain, or stealth behavior in the skill text. The main risk is unresolved trust and data-flow ambiguity around unspecified Moz and Google Search Console MCPs, which could be unofficial third-party wrappers receiving brand context and search data. This is a coherent marketing skill, but its dependency and routing model are under-specified enough to warrant caution.