gemini-cli
Warn
Audited by Socket on Sep 23, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill's core purpose aligns with its capability to invoke Gemini CLI, and the dependency appears to be the official Google tool rather than an unknown binary. However, the repeated use of `--yolo` and instructions to avoid confirmations make the skill meaningfully riskier than a normal documentation/integration guide by encouraging autonomous tool actions without per-step approval.
Confidence: 90%Severity: 56%
Audit Metadata