gemini-cli

Warn

Audited by Socket on Apr 2, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

BENIGN with elevated operational risk. The skill is coherent with its stated purpose and uses an official Google CLI and documented auth paths, but it delegates broad autonomous actions to a secondary agent and exposes a high-risk `--yolo` auto-approval mode. Main concerns are autonomy and unpinned global install, not malware or deceptive data routing.

Confidence: 87%Severity: 68%
Audit Metadata
Analyzed At
Apr 2, 2026, 10:34 AM
Package URL
pkg:socket/skills-sh/dustland%2Fopenviber%2Fgemini-cli%2F@725a962cd34480f18f0963f105451db01767ecc3
Security Audit — socket — gemini-cli