flowdriver-covert-transport

Warn

Audited by Socket on Apr 28, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is internally consistent, but its purpose is covert network evasion and arbitrary proxying through Google Drive. Combined with unpinned third-party source installation and forwarding of Google OAuth credentials/token files to that code and to a remote server, it presents high security risk despite not showing confirmed malware or obfuscation.

Confidence: 91%Severity: 87%
Audit Metadata
Analyzed At
Apr 28, 2026, 12:55 AM
Package URL
pkg:socket/skills-sh/Aradotso%2Ftrending-skills%2Fflowdriver-covert-transport%2F@526e403a817bc11a2f3b4941b8a444ed5833a784