skills/aiagenta2z/onekey-gateway/google-maps/Socket

google-maps

Warn

Audited by Socket on Mar 30, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill’s user-facing purpose is Google Maps access, but its actual data path sends queries and credentials through DeepNLP/OneKey instead of official Google APIs. The install path is relatively normal, yet the third-party gateway model and credential forwarding are disproportionate for a maps integration and create meaningful interception risk.

Confidence: 89%Severity: 76%

Audit Metadata

Analyzed At

Mar 30, 2026, 02:42 PM

Package URL

pkg:socket/skills-sh/aiagenta2z%2Fonekey-gateway%2Fgoogle-maps%2F@75492fd7d149785af6de3368dc2ee0a0623acb23