gpc-app-recovery

Fail

Audited by Socket on Mar 8, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The skill describes a coherent, purpose-aligned workflow for managing Google Play app recovery actions via a CLI tool. The data flows and user-approval gating reduce the likelihood of inadvertent destructive actions. Primary security considerations hinge on how the gpc binary is sourced and authenticated, how credentials/API tokens are managed by the gpc tool, and how recovered-action data is stored/transmitted. No explicit malicious patterns are evident in the provided content, but explicit install-source trust and credential handling details are missing and should be clarified before deploying in production.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 8, 2026, 12:39 PM
Package URL
pkg:socket/skills-sh/AndroidPoet%2Fplayconsole-cli-skills%2Fgpc-app-recovery%2F@9b104d136c2b236a5ca3724f1970e6d3263f6fb1