google-drive-automation

Warn

Audited by Socket on Jul 31, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core capabilities fit a Google Drive automation skill, and OAuth plus keyring storage are broadly proportionate. However, install/dependency provenance is incomplete, the observed distribution path is community-sourced rather than clearly author-owned, and the statement about token refresh via a Google cloud function is ambiguous enough to leave data-flow trust unresolved.

Confidence: 78%Severity: 58%
Audit Metadata
Analyzed At
Jul 31, 2026, 04:36 PM
Package URL
pkg:socket/skills-sh/sickn33%2Fagentic-awesome-skills%2Fgoogle-drive-automation%2F@efbaf85e1ff22cb75e69b61be1018396c1f7647bd178e31a9e378a43447a6ef6
Security Audit — socket — google-drive-automation