seo

Warn

Audited by Socket on Mar 23, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS due to autonomous real-world actions: the skill is broadly consistent with SEO automation, but it instructs an agent to make direct repository changes, run builds/tests, create commits, and optionally write telemetry outside the repo without asking the user questions. I found no credential harvesting, malicious exfiltration, or suspicious installer chain; risk comes mainly from unsupervised write/commit behavior and slightly expanded filesystem scope.

Confidence: 90%Severity: 68%
Audit Metadata
Analyzed At
Mar 23, 2026, 11:03 AM
Package URL
pkg:socket/skills-sh/tinh2%2Fskills-hub-registry%2Fseo%2F@991bee36313693ec491a43894cf08b8aab1a26e7
Security Audit — socket — seo