yoast-seo

Warn

Audited by Socket on Apr 30, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is coherent in purpose, and the CLI install source appears vendor-aligned and official, so this is not strong malware evidence. However, it makes a third-party platform (Membrane) the mandatory intermediary for Yoast auth and data operations, which creates meaningful data-flow and account-scope risk beyond a direct Yoast/WordPress integration.

Confidence: 84%Severity: 53%
Audit Metadata
Analyzed At
Apr 30, 2026, 06:49 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fyoast-seo%2F@34bff71637606d5f2373514dc6b209ebb6fe999d
Security Audit — socket — yoast-seo