seo-content-gap
Warn
Audited by Socket on Jul 9, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The business purpose and official API target are coherent, but the skill unnecessarily collects credentials through chat, writes them to a local `.env`, and executes unverifiable local scripts that receive those credentials. Main risk is credential handling and opaque script trust, not confirmed malicious exfiltration.
Confidence: 90%Severity: 80%
Audit Metadata