gps-listings

Warn

Audited by Socket on Jul 31, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the capability matches the stated Google Play listing management purpose, but the skill relies on an unverified gps CLI/MCP wrapper that likely handles high-privilege Play credentials and can make public store changes. Main concern is tooling provenance and credential forwarding, not clear malicious behavior.

Confidence: 78%Severity: 56%
Audit Metadata
Analyzed At
Jul 31, 2026, 02:45 PM
Package URL
pkg:socket/skills-sh/appeeky%2Fgoogle-play-console-cli%2Fgps-listings%2F@9e23ee5e77d8a2e9658c1c0e27a9b528edcd262107286929224224f20f124311
Security Audit — socket — gps-listings