skills/chadboyda/agent-gtm-skills/ai-seo/Socket

ai-seo

Fail

Audited by Socket on Mar 18, 2026

1 alert found:

Malware

MalwareSKILL.md

HIGH

MalwareHIGH

SKILL.md

SUSPICIOUS. The skill’s SEO purpose is legitimate and most guidance is coherent, but it mixes an official same-org DataForSEO endpoint with a personal third-party GSC MCP install that receives Google credentials. That unverifiable dependency and credential forwarding make the overall skill high risk despite otherwise plausible SEO functionality.

Confidence: 91%Severity: 84%

Audit Metadata

Analyzed At

Mar 18, 2026, 10:13 PM

Package URL

pkg:socket/skills-sh/chadboyda%2Fagent-gtm-skills%2Fai-seo%2F@740f1debf8880e7685429fc357d7dbff6ac459af