plaud-recordings-to-google-drive-sync

Warn

Audited by Socket on Aug 7, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the workflow’s actions match its stated sync purpose, but it relies on AgentPMT-hosted intermediary tooling, forwards sensitive recording/transcript data through third-party services, and instructs unpinned transitive skill installation. This looks coherent rather than overtly malicious, but the trust and data-flow footprint is broader than a direct Plaud-to-Google integration.

Confidence: 83%Severity: 64%
Audit Metadata
Analyzed At
Aug 7, 2026, 02:51 PM
Package URL
pkg:socket/skills-sh/AgentPMT%2Fagent-skills%2Fplaud-recordings-to-google-drive-sync%2F@fe4e60cbd5e8158009679b47f4fffdccd8e57aa81506fae23c6240c3b6e066e5