goplaces
Fail
Audited by Socket on Mar 12, 2026
1 alert found:
Obfuscated FileObfuscated FileSKILL.md
HIGHObfuscated FileHIGH
SKILL.md
The goplaces skill appears coherent with its stated purpose: a Google Places API client CLI that requires an API key and is installed via a standard package manager. Data flows involve user input and an API key to external Google endpoints with results returned to stdout or as JSON. No unverifiable binaries or broad credential access patterns are evident. The main security considerations are explicit external API usage and handling of the API key; users should ensure the API key is kept secure and that any proxies/base URLs used are trusted. Overall, this is a benign to low-risk tool for its described use case.
Confidence: 98%
Audit Metadata