Surfer SEO Content Optimizer
Warn
Audited by Socket on Mar 29, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the SEO functionality is broadly coherent, but the main risk is install trust. The skill uses transitive skill installation through a transient npm CLI with unclear publisher provenance, conflicting official-doc patterns, and one alternative install command that does not match current OpenClaw documentation. I do not see confirmed malicious data exfiltration from the skill description itself, but the installation path is not trustworthy enough to treat as benign.
Confidence: 84%Severity: 74%
Audit Metadata