seo-content-brief

Fail

Audited by Socket on Mar 25, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

SUSPICIOUS. The skill’s purpose and capabilities mostly align for SEO research, and the installer appears to be the publisher’s official same-org path with checksum verification. However, it still relies on a pipe-to-shell external CLI, grants broad infsh Bash access, processes untrusted web content, and encourages transitive installation of more skills; these combined trust-boundary issues make it riskier than a normal documentation-only skill.

Confidence: 85%Severity: 58%
Audit Metadata
Analyzed At
Mar 25, 2026, 01:01 AM
Package URL
pkg:socket/skills-sh/inference-sh-3%2Fskills%2Fseo-content-brief%2F@fc68b7be4e33922db387d8b293dd8d1314c863b2