seo-backlinks
Warn
Audited by Socket on Jul 9, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The visible purpose is coherent and the external service domains are official DataForSEO properties, but the skill asks the user to paste raw API credentials into chat, stores them locally, and forwards them through unprovided local scripts. Those opaque local executables are the main risk and make the skill higher-trust than its simple SEO-audit description suggests.
Confidence: 84%Severity: 74%
Audit Metadata