seo-blog-admin-projects

Warn

Audited by Socket on Oct 7, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's purpose is coherent, but its operational footprint is broad. The main risks are unpinned npx execution of the Wotaso CLI, forwarding many credentials to that CLI, and transitive skill installation/update instructions. Data flows generally match the stated integration purpose and target official services, so this is not confirmed malicious, but it carries meaningful supply-chain and trust risk.

Confidence: 82%Severity: 61%
Audit Metadata
Analyzed At
Oct 7, 2026, 02:31 PM
Package URL
pkg:socket/skills-sh/wotaso%2Fseodrafts-agent-skills%2Fseo-blog-admin-projects%2F@e663477f287f702ec532de8b72f8b1108dafda377a1333b308f78238e9bbe97f