gpc-app-recovery
Warn
Audited by Socket on Sep 17, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The workflow matches a legitimate Google Play recovery use case and is scoped to that purpose, but it relies on an unofficial third-party `gpc` binary with ambiguous provenance and documented pipe-to-shell install patterns. The skill also enables consequential Play Console actions, though it includes an explicit user-approval guard for deploy/cancel.
Confidence: 88%Severity: 74%
Audit Metadata