gemini-gen

Warn

Audited by Socket on Apr 11, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's purpose matches multimodal analysis, but its data flow is routed through Renoise-controlled proxy and file-upload infrastructure instead of Google's official Gemini endpoints. Capabilities are mostly proportionate, yet automatic media upload and third-party credential forwarding make this a medium-high risk skill rather than a benign direct API integration.

Confidence: 87%Severity: 68%
Audit Metadata
Analyzed At
Apr 11, 2026, 01:37 AM
Package URL
pkg:socket/skills-sh/ArcoCodes%2Frenoise-plugins-official%2Fgemini-gen%2F@d653fe8d346dd90e25a35e25f761d7e4a88e46e7
Security Audit — socket — gemini-gen