crawl-budget

Warn

Audited by Socket on Sep 26, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the core crawl-budget purpose and webfetch behavior are coherent, but the skill also relies on unverifiable local scripts from a personal repo. One script is documented to consume stored DataForSEO credentials and relay data to a third-party API, which is broader than the skill metadata suggests. No confirmed malware or hidden exfiltration is shown, but install/provenance trust is weak enough to make this a high-risk skill.

Confidence: 90%Severity: 78%
Audit Metadata
Analyzed At
Sep 26, 2026, 08:56 AM
Package URL
pkg:socket/skills-sh/venomous2%2Fopencode-seo%2Fcrawl-budget%2F@40a684d65ad81d3db5a263c79f9570d09385032e432c3d843ee366c501e29a80