google-docs-automation
Warn
Audited by Socket on Apr 14, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill’s stated capabilities fit its purpose, but the trust boundary is an unverified community-published Python implementation that handles OAuth tokens and document data. The biggest concern is unclear credential/data flow, especially the non-standard claim that token refresh uses a Google cloud function rather than clearly documented official OAuth endpoints.
Confidence: 83%Severity: 68%
Audit Metadata