cloud-agents-cli

Warn

Audited by Socket on Oct 8, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s stated Google Cloud/Google agents purpose is plausible, but its actual install footprint is inconsistent: a personal TypeScript repo/package is presented alongside the official Google `google/agents-cli` skill path, and the official upstream install story is Python-based, not the Node-only workflow claimed here. There is no direct exfiltration, credential theft, or pre-execution malware in the provided text, but the publisher/source mismatch and transitive skill installation make the trust model unclear and disproportionate to the implied official branding.

Confidence: 91%Severity: 72%
Audit Metadata
Analyzed At
Oct 8, 2026, 11:47 PM
Package URL
pkg:socket/skills-sh/reason-machines%2Fdevtools-skills%2Fcloud-agents-cli%2F@d4f16f045f02716ad04ee0ad1a94f3faf333cd1c222cd4eb1505d3aabe1d9c13