30x-seo-backlinks

Fail

Audited by Socket on Mar 9, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The skill's footprint is largely coherent with its stated purpose: it uses DataForSEO API endpoints to perform backlink analyses and requires a user-supplied credential file for API authentication. The main security considerations revolve around local credential handling (reading ~/.config/dataforseo/auth) and transmitting credentials via HTTP Basic auth. This is a common pattern for developer tooling but warrants caution in multi-user or shared environments. No evidence of automated data exfiltration, third-party binaries, or deceptive behavior is observed. Overall verdict: BENIGN with caution due to credential handling and potential exposure risks in shared contexts.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 9, 2026, 02:02 AM
Package URL
pkg:socket/skills-sh/norahe0304-art%2F30x-seo%2F30x-seo-backlinks%2F@fee2f7b0c2775ac2c601f190a9aeff79721de251