aurora-sheets-sync
Fail
Audited by Socket on Mar 9, 2026
1 alert found:
Obfuscated FileObfuscated FileSKILL.md
HIGHObfuscated FileHIGH
SKILL.md
The skill’s capabilities are coherent with its stated purpose: bidirectional YAML-Sheets synchronization using Google Sheets API, with idempotent pull behavior and defined field mappings. Install sources and data flows are typical for developer tooling and do not exhibit malcode patterns. The primary security considerations relate to proper protection of the service account credentials and restricting API scopes to necessary spreadsheets. Overall assessment: BENIGN with careful credential-handling reminders; securityRisk should be monitored and kept at MEDIUM if runtime environments cannot guarantee secret management.
Confidence: 98%
Audit Metadata