brainstorm
Warn
Audited by Socket on Jul 23, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
The skill’s stated purpose is coherent, and its official dependency on Google AI Studio plus `google-genai` is broadly legitimate. However, the core execution path hinges on an unverifiable local `gemini.py` wrapper that receives the API key and all brainstorm content, so this is best classified as suspicious/high-risk rather than benign.
Confidence: 86%Severity: 82%
Audit Metadata