Surfer SEO Content Optimizer

Warn

Audited by Socket on Mar 29, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the SEO functionality is broadly coherent, but the main risk is install trust. The skill uses transitive skill installation through a transient npm CLI with unclear publisher provenance, conflicting official-doc patterns, and one alternative install command that does not match current OpenClaw documentation. I do not see confirmed malicious data exfiltration from the skill description itself, but the installation path is not trustworthy enough to treat as benign.

Confidence: 84%Severity: 74%
Audit Metadata
Analyzed At
Mar 29, 2026, 04:37 AM
Package URL
pkg:socket/skills-sh/agentskillexchange%2Fskills%2Fsurfer-seo-content-optimizer%2F@7c1094602448edeb7edc21f0eebea43929d1d310