ge-demo-video

Warn

Audited by Socket on Sep 17, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The overall workflow matches the stated purpose of generating and delivering demo videos, and major endpoints are official Google/Chrome tooling. The main concern is install/execution trust and credential handling: the skill may use an unverified third-party `gdrive` CLI and forwards live Google auth tokens into downstream upload logic. That is disproportionate enough to classify as suspicious rather than benign, but there is no clear evidence of deliberate exfiltration or malware.

Confidence: 90%Severity: 80%
Audit Metadata
Analyzed At
Sep 17, 2026, 09:19 PM
Package URL
pkg:socket/skills-sh/googlecloudplatform%2Fgenerative-ai%2Fge-demo-video%2F@4ff185463da8c323abfe78fcba78f958f084cb2a7821b2da3c29ada051e38725
Security Audit — socket — ge-demo-video