brainstorm

Warn

Audited by Socket on Jul 23, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill’s stated purpose is coherent, and its official dependency on Google AI Studio plus `google-genai` is broadly legitimate. However, the core execution path hinges on an unverifiable local `gemini.py` wrapper that receives the API key and all brainstorm content, so this is best classified as suspicious/high-risk rather than benign.

Confidence: 86%Severity: 82%
Audit Metadata
Analyzed At
Jul 23, 2026, 03:12 PM
Package URL
pkg:socket/skills-sh/awrshift%2Fskill-brainstorm%2Fbrainstorm%2F@df206a219ebb7d5bd316b6b649de9ec038eb281a
Security Audit — socket — brainstorm