gpc-device-management

Warn

Audited by Socket on Sep 17, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s stated capabilities fit device-management work, but its trust boundary is unclear because it relies on an unspecified `gpc` binary with multiple unrelated third-party candidates. The main issue is ambiguous CLI provenance plus the ability to perform live Play Console changes, not clear evidence of malware or exfiltration in the skill text itself.

Confidence: 84%Severity: 72%
Audit Metadata
Analyzed At
Sep 17, 2026, 02:33 PM
Package URL
pkg:socket/skills-sh/androidpoet%2Fplayconsole-cli-skills%2Fgpc-device-management%2F@4ee10d7bad1b0541df53b51ba5632f39bc5ed5f38cd0d44624c10962e1455909