dataforseo

Warn

Audited by Socket on Apr 21, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is not overtly malicious and uses an official npm-published CLI, but it introduces a third-party Membrane intermediary for authentication and API traffic rather than direct DataForSEO access. That proxying is broader than necessary for a simple DataForSEO skill, and the description is partially inconsistent with the actual SEO-focused capabilities.

Confidence: 84%Severity: 56%
Audit Metadata
Analyzed At
Apr 21, 2026, 03:36 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fdataforseo%2F@3f3e16d722442b8e086201a96db9b98c3921633e