Security audit
seo-flow
Security checks across malware telemetry and agentic risk
Overview
This skill is a disclosed SEO prompt library that reads its bundled references and only updates prompt files if the user runs an optional sync command.
Install is reasonable for SEO workflow support. Before using /seo flow sync, confirm you trust the upstream FLOW prompt source and the local seogeo command, because that path updates local prompt files. Avoid providing confidential analytics, customer transcripts, or sales notes unless you intend the agent to use them in the SEO analysis.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.