skills/sainytk/goog-cli/goog/Socket

goog

Warn

Audited by Socket on Jul 25, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill’s purpose is coherent, but it centralizes all Google Workspace access into a non-official third-party CLI and even appears internally inconsistent about the binary name (`goog` vs published `gws`). Data flow seems to stay with Google APIs, so this is not confirmed malware, but the trust and credential scope are broad enough to warrant medium risk.

Confidence: 82%Severity: 59%

Audit Metadata

Analyzed At

Jul 25, 2026, 06:24 AM

Package URL

pkg:socket/skills-sh/sainytk%2Fgoog-cli%2Fgoog%2F@39541999b6117d7668eaf63da0352843810059125719317bf424f228fd6cdeee