skill-gemini-google-search-tool

Warn

Audited by Socket on Jun 17, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's purpose and data flows are mostly coherent for a Gemini grounding CLI, and it appears to use Google's official API path. The main concern is install trust: users are asked to clone and install from a personal GitHub repo with unverified release provenance, plus minor credential-handling risks in documentation.

Confidence: 100%Severity: 60%
Audit Metadata
Analyzed At
Jun 17, 2026, 01:14 AM
Package URL
pkg:socket/skills-sh/dnvriend%2Fgemini-google-search-tool%2Fskill-gemini-google-search-tool%2F@c44ff3a9a76c695baadd235a00b06ba3df736508a3ddd5e4913e752eb5e197bf
Security Audit — socket — skill-gemini-google-search-tool