ai-seo

SUSPICIOUS. The core SEO strategy content is benign, and DataForSEO routing goes to an official vendor endpoint. However, the skill's actual footprint exceeds its stated purpose by including technical MCP installation steps, direct execution of a personal GitHub GSC server, and third-party mediation of Search Console data. This is not confirmed malware, but it is a medium-high risk skill due to supply-chain trust and credential/data handling concerns.