google

Fail

Audited by Socket on May 18, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

SUSPICIOUS/HIGH RISK. The stated Google-integration purpose is plausible, but the install and execution path is fundamentally inconsistent with a trustworthy skill: it depends on an unverifiable binary, uses third-party/paste-site distribution, includes obfuscated remote shell execution, and would receive sensitive Google OAuth access. This is not confirmed malware from the text alone, but it presents severe supply-chain and credential-exposure risk.

Confidence: 94%Severity: 98%
Audit Metadata
Analyzed At
May 18, 2026, 09:19 AM
Package URL
pkg:socket/skills-sh/delorenj%2Fskills%2Fgoogle%2F@4c6d851f50ba86f9f5525818ffc07791809dfdd6
Security Audit — socket — google