skills/clawlink-hq/skills/google-tasks/Socket

google-tasks

Warn

Audited by Socket on Jun 28, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill’s capabilities fit its stated purpose, and the CLI provenance appears reasonably verifiable via npm and same-org sources. However, the core integration routes Google Tasks access and OAuth delegation through ClawLink’s hosted service instead of direct official Google API use, making this a meaningful third-party data-flow and trust risk rather than a clearly malicious skill.

Confidence: 84%Severity: 62%

Audit Metadata

Analyzed At

Jun 28, 2026, 02:45 PM

Package URL

pkg:socket/skills-sh/clawlink-hq%2Fskills%2Fgoogle-tasks%2F@9fc0d98d983bbbcd5526ed3451cc928359c888d90b4865ac7514d561933f5533