seo-blog-admin-projects
Warn
Audited by Socket on Jul 22, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill's purpose is coherent, but its operational footprint is broad. The main risks are unpinned npx execution of the Wotaso CLI, forwarding many credentials to that CLI, and transitive skill installation/update instructions. Data flows generally match the stated integration purpose and target official services, so this is not confirmed malicious, but it carries meaningful supply-chain and trust risk.
Confidence: 82%Severity: 61%
Audit Metadata