skills/zubair-trabzada/dataforseo-claude/seo-rankings/Socket

seo-rankings

Warn

Audited by Socket on Jul 9, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the business purpose and official DataForSEO endpoint usage are coherent, but the skill asks users to paste raw API credentials into chat and then hands them to unverifiable local executables. That combination makes this a high-risk credential-forwarding skill even without confirmed malicious exfiltration.

Confidence: 87%Severity: 84%

Audit Metadata

Analyzed At

Jul 9, 2026, 11:12 AM

Package URL

pkg:socket/skills-sh/zubair-trabzada%2Fdataforseo-claude%2Fseo-rankings%2F@a4c76537d918c6652c2c855a7e8ab267ce243f13a99ad988c15dff29b62792a1