gemini-cli

Warn

Audited by Socket on Sep 23, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill's core purpose aligns with its capability to invoke Gemini CLI, and the dependency appears to be the official Google tool rather than an unknown binary. However, the repeated use of `--yolo` and instructions to avoid confirmations make the skill meaningfully riskier than a normal documentation/integration guide by encouraging autonomous tool actions without per-step approval.

Confidence: 90%Severity: 56%
Audit Metadata
Analyzed At
Sep 23, 2026, 05:08 PM
Package URL
pkg:socket/skills-sh/samhvw8%2Fdot-claude%2Fgemini-cli%2F@198dbfcf51f9129339cf4ad781291ae514536418ebf41de2cd71b6f92109591a
Security Audit — socket — gemini-cli