gdrive-access

Warn

Audited by Socket on May 13, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The stated purpose is coherent for a Google Drive skill, and use of 1Password plus Google Drive is plausible. However, the trust boundary is poor: a custom unverifiable gdrive binary is built locally and receives credential-related input, so install trust and credential-forwarding risk are disproportionate to a normal Drive integration. Main concern is not confirmed malice, but high security risk from an unverified binary handling OAuth access.

Confidence: 90%Severity: 84%
Audit Metadata
Analyzed At
May 13, 2026, 07:17 PM
Package URL
pkg:socket/skills-sh/terrylica%2Fcc-skills%2Fgdrive-access%2F@7fc31a251b51950fed934872129238093020b658