seo-geo-claude-skills

SUSPICIOUS. The skill’s SEO/GEO capabilities broadly match its stated purpose, and there is no evidence of credential theft, covert exfiltration, or load-time execution. The main risk is transitive trust: it asks agents to install remote skill content through several ecosystems, often from mutable GitHub or marketplace sources, and the analyzed install text is partly stale relative to the repo’s current upstream instructions. The rm -rf examples are documentation-only and not strong malicious signals.