skills/szoloth/skills/gdcli/Socket

gdcli

Warn

Audited by Socket on Jun 30, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill’s purpose and capabilities align with Google Drive management, and setup references official Google domains. Risk comes from forwarding OAuth credentials and tokens to a non-Google third-party CLI with only partially verified provenance; this is a moderate supply-chain and credential-handling concern rather than confirmed malware.

Confidence: 84%Severity: 56%

Audit Metadata

Analyzed At

Jun 30, 2026, 08:28 PM

Package URL

pkg:socket/skills-sh/SZoloth%2Fskills%2Fgdcli%2F@778e6969643bf815148d632fc1171281e2f68ca589c1c1a6320cd2ef21c522f0