seo-prospect

Warn

Audited by Socket on Jul 9, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s purpose and vendor data flows are mostly coherent, and the DataForSEO credential model matches official docs, but the core execution relies on unseen local scripts that collect and use raw credentials. Because those executables are unverifiable from the provided skill, this is high security risk supply-chain exposure rather than confirmed malware.

Confidence: 89%Severity: 78%
Audit Metadata
Analyzed At
Jul 9, 2026, 11:11 AM
Package URL
pkg:socket/skills-sh/zubair-trabzada%2Fdataforseo-claude%2Fseo-prospect%2F@ebd2fb33ccec1859367d300cbe343df16d54f2ee2b16ef18f1435d3cfd38d389
Security Audit — socket — seo-prospect