The Agent Skills Directory

[SAFE]: The skill facilitates programmatic access to the Google Play Developer API using vendor-provided SDKs (@gpc-cli/api and @gpc-cli/auth) which are appropriate for the stated purpose of backend automation.
[SAFE]: The documentation highlights internal security controls, including a p() helper for URL parameter encoding to prevent path traversal and a validateSessionUri() check to mitigate SSRF risks during file uploads.
[SAFE]: Error handling patterns use a redactPath() utility to ensure that sensitive identifiers like purchase tokens are stripped from log messages and thrown errors before they are exposed to the user or logs.
[SAFE]: The scripts/detect_gpc.mjs script uses standard system commands to detect the environment configuration without acquiring elevated privileges or performing unauthorized network operations.
[SAFE]: Authentication examples correctly follow the principle of least privilege, encouraging the use of environment variables or specific service account key files rather than hardcoded credentials.

gpc-sdk-usage