yoast-seo

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill's purpose aligns with Yoast SEO management, and the CLI install source is an official npm package, so this is not malware. However, the integration depends on a third-party Membrane CLI and proxy that stores credentials and intermediates authenticated API traffic instead of using Yoast's official direct API flow, which raises medium trust and data-flow concerns.

Confidence: 88%Severity: 56%
Audit Metadata
Analyzed At
Sep 15, 2026, 08:11 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fyoast-seo%2F@b4af47e6c2e9fc6c9b5ff7f7f8b2d91c9e0e9a9370b982de1445c1ae360dce42