skills/replynodes/replynodes-google-play-research/google-play-research/Socket

google-play-research

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill's read-only Google Play research purpose is coherent, and the prompt-injection concern is well-mitigated. However, it forwards credentials to a third-party MCP endpoint and the specific hostname in the skill is inconsistent with ReplyNodes' official documentation, creating medium trust and data-flow risk even without any installer or executable payload.

Confidence: 89%Severity: 56%

Audit Metadata

Analyzed At

Sep 15, 2026, 04:08 PM

Package URL

pkg:socket/skills-sh/replynodes%2Freplynodes-google-play-research%2Fgoogle-play-research%2F@068e9247fee00f6333b7ce3a307f4a16d3f77175