gemini-api

Fail

Audited by Socket on Feb 21, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
scripts/gemini_api.py

The code is a functional, straightforward API client for Gemini 3 series with typical CLI usage. It correctly handles text and multimodal workflows, but exposes API keys in URLs, lacks robust retry logic, and has minimal input validation and logging hygiene. While not inherently malicious, the implementation could leak credentials and is sensitive to network/API reliability. An improved version should address authentication handling, resilience, and privacy-conscious logging.

Confidence: 98%
Audit Metadata
Analyzed At
Feb 21, 2026, 03:12 PM
Package URL
pkg:socket/skills-sh/ya-luotao%2Fskills%2Fgemini-api%2F@5460e13585b7e3920951055cf691ffc83556fa68
Security Audit — socket — gemini-api