skills/appeeky/google-play-console-cli/gps-testers/Socket

gps-testers

Warn

Audited by Socket on Jul 31, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the purpose is coherent with Google Play tester management, but the skill’s main executable (`gps`) is not provenance-verified in the skill and appears to be an opaque third-party or internal wrapper. No direct credential theft or exfiltration is shown, but the unverifiable CLI and real account-changing actions make the skill high risk to trust and install.

Confidence: 82%Severity: 78%

Audit Metadata

Analyzed At

Jul 31, 2026, 02:45 PM

Package URL

pkg:socket/skills-sh/appeeky%2Fgoogle-play-console-cli%2Fgps-testers%2F@88bfd8ad12eeacc2839ce06b448b5bd43cf9453bcd2732997c59b8b0fc4ec4d8