gpc-cli-usage

Warn

Audited by Socket on Apr 21, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is coherent for Play Console automation, but it normalizes use of a third-party `gpc` CLI with raw service-account credentials and gives no provenance/install trust context. This is not confirmed malware, yet the external credential-handling dependency makes the skill medium risk.

Confidence: 84%Severity: 58%
Audit Metadata
Analyzed At
Apr 21, 2026, 06:17 PM
Package URL
pkg:socket/skills-sh/megastep%2Fplayconsole-cli-skills%2Fgpc-cli-usage%2F@94b9930649cc7a8370579448b0ae676beeb595d1
Security Audit — socket — gpc-cli-usage