search-console

SUSPICIOUS. The skill’s core purpose largely matches its capabilities and official Google API usage, but it expands beyond Search Console into a broader third-party SEO toolchain and encourages use of a hosted MCP/account service that may receive tokens and research-provider keys. Install provenance is substantially better than a random download-exec chain, so this is not malware, but the scope expansion and credential forwarding make the skill medium risk rather than benign.