30x-seo-monitor

Warn

Audited by Socket on Sep 20, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated purpose matches SEO monitoring, and the official gws CLI path is broadly coherent. However, the alternative MCP setup materially increases risk by executing an unpinned third-party npm package and exposing Google credential material to that package, which is disproportionate compared with using official Google or same-org tooling directly.

Confidence: 87%Severity: 81%
Audit Metadata
Analyzed At
Sep 20, 2026, 12:34 AM
Package URL
pkg:socket/skills-sh/norahe0304-art%2F30x-seo%2F30x-seo-monitor%2F@70c3568abacb47e1c4a23e812aed67084e0fecfb762e007572ac8f2cde980b16