seo-dataforseo

Warn

Audited by Socket on May 26, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The SEO capabilities and credential scope are mostly aligned with the stated purpose, and the data flows appear intended for official DataForSEO-backed SEO analysis. The main concern is install trust: the skill tells users to run a third-party repo-local installer instead of DataForSEO's official documented MCP installation path, creating a supply-chain inconsistency. No clear credential theft or malicious exfiltration is evident from the skill text alone, but the installer mismatch and external-content processing justify a medium-risk classification.

Confidence: 84%Severity: 58%
Audit Metadata
Analyzed At
May 26, 2026, 08:14 PM
Package URL
pkg:socket/skills-sh/AgriciDaniel%2Fclaude-seo%2Fseo-dataforseo%2F@e867bec439b7f2eea50a0bb178faf1503845a65a
Security Audit — socket — seo-dataforseo