gleap-sdk-setup

Fail

Audited by Socket on Feb 18, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
platform-android.md

The README documents integration points where sensitive user data and media can be supplied to the Gleap SDK and—based on API semantics—likely uploaded to a remote backend. The fragment itself contains no executable or malicious code. The primary security concern is moderate and privacy-focused: developers must validate the SDK implementation (network endpoints, encryption, retention), avoid hardcoding API keys, and enforce least-privilege permissions and user consent before collecting or uploading PII or media.

Confidence: 98%
Audit Metadata
Analyzed At
Feb 18, 2026, 01:43 PM
Package URL
pkg:socket/skills-sh/GleapSDK%2Fagent-skills%2Fgleap-sdk-setup%2F@49cfd1ab16664ed60f167c1a47eac3830434e971