geo-loop

Warn

Audited by Socket on Jul 31, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill is internally coherent and scoped to local GEO workspace maintenance, with proportionate file access and a narrowly scoped API key use for SERP collection. Main risk is supply-chain trust in the required `egeo` CLI, which the provided evidence does not clearly verify through an official registry or release trail; this makes the skill suspicious from an install-trust perspective, but not malicious.

Confidence: 84%Severity: 72%
Audit Metadata
Analyzed At
Jul 31, 2026, 06:11 AM
Package URL
pkg:socket/skills-sh/mverab%2Fegeoagents%2Fgeo-loop%2F@9dda7f41295454ae5ab842e61dd1b554fb7e536f824321e5c9bc0eefe851e40e
Security Audit — socket — geo-loop