dataforseo

Warn

Audited by Socket on Sep 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The documented behavior mostly fits a DataForSEO integration, and the install path uses an official npm package rather than a covert payload. However, the skill’s stated purpose is inconsistent with its actual SEO-focused capabilities, and all auth/API traffic is routed through Membrane as a third-party intermediary with a mutable CLI install, which raises medium trust and data-flow concerns.

Confidence: 87%Severity: 56%
Audit Metadata
Analyzed At
Sep 22, 2026, 03:20 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fdataforseo%2F@d16e9f70a8036f981d9bd9d644820a43d0f354b3bcc2769119feaa9088dbb4e1
Security Audit — socket — dataforseo