seo-keyword-difficulty

SUSPICIOUS. The skill's capabilities mostly match its SEO research purpose, but it routes core analysis through a third-party hosted MCP and recommends using a token in the URL, creating avoidable credential exposure. The optional Google Search Console integration is purpose-consistent, yet its MCP provenance is unspecified, and the next-step skill handoff adds transitive trust risk. No evidence of malware, hidden execution, or installer-based compromise was found.