ai-seo
Warn
Audited by Socket on Sep 14, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The SEO purpose is coherent, and the official DataForSEO integration is proportionate, but the skill also instructs users to clone and run a personal-repo GSC MCP server and hand it Google credentials. That credential-forwarding to unverifiable third-party code creates a disproportionate supply-chain risk for an otherwise benign SEO strategy skill.
Confidence: 93%Severity: 86%
Audit Metadata