dfs-keyword-research
Warn
Audited by Socket on Mar 14, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s purpose is coherent, but it depends on a third-party npm CLI that receives DataForSEO credentials and hides the actual API/auth data flow behind the wrapper. This is not clearly malicious, yet the install trust and credential-forwarding model are riskier than a direct official API integration.
Confidence: 79%Severity: 58%
Audit Metadata