seo

Warn

Audited by Socket on Jul 9, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s SEO capabilities largely match its stated purpose and the intended external service is the official DataForSEO platform, but it handles credentials in a risky way by asking users to paste API secrets into chat, reading raw dotfiles, and passing those secrets through unverifiable local wrapper scripts. This is not confirmed malware, but the credential-handling and opaque execution layer make it medium risk.

Confidence: 86%Severity: 58%
Audit Metadata
Analyzed At
Jul 9, 2026, 11:11 AM
Package URL
pkg:socket/skills-sh/zubair-trabzada%2Fdataforseo-claude%2Fseo%2F@ff1301da720b3f7a6c44f7ce8a5541dad8dedd53ce2b45c3cb51bd77fa8090f0
Security Audit — socket — seo