dataforseo
Warn
Audited by Socket on Sep 22, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The documented behavior mostly fits a DataForSEO integration, and the install path uses an official npm package rather than a covert payload. However, the skill’s stated purpose is inconsistent with its actual SEO-focused capabilities, and all auth/API traffic is routed through Membrane as a third-party intermediary with a mutable CLI install, which raises medium trust and data-flow concerns.
Confidence: 87%Severity: 56%
Audit Metadata