skills/appeeky/google-play-console-cli/gps-purchases/Socket

gps-purchases

Warn

Audited by Socket on Jul 31, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The business purpose is coherent for Google Play operations, and the safety notes are appropriate, but the skill delegates high-impact refund/revocation actions to a local CLI whose official provenance is not clearly established from the evidence provided. Main risk is supply-chain and autonomous real-world action, not confirmed malware.

Confidence: 81%Severity: 63%

Audit Metadata

Analyzed At

Jul 31, 2026, 02:45 PM

Package URL

pkg:socket/skills-sh/appeeky%2Fgoogle-play-console-cli%2Fgps-purchases%2F@f9c13ed5aaba2b4ec1698f0953fa698e939fe9de594c1b7f7b96b670966f5c3a