seo-geo

SUSPICIOUS. The core purpose and most capabilities are coherent for an SEO/GEO audit skill, and there is no clear credential harvesting or exfiltration path. Risk mainly comes from broad Bash permission combined with fetching arbitrary web content, which creates indirect prompt-injection exposure, plus moderate supply-chain hygiene concerns from the broader repo’s unpinned raw GitHub installers.