advanced-web-ranking
Warn
Audited by Socket on Apr 30, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill’s purpose mostly matches its capabilities, and the CLI comes from an official-looking npm scope tied to the publisher. However, the integration is not direct: authentication, credentials, and data access are routed through Membrane as an intermediary, which expands trust and creates a meaningful third-party credential/data handling risk. This is not confirmed malware, but it is higher-risk than a direct official API skill.
Confidence: 84%Severity: 58%
Audit Metadata