gemini-api

Fail

Audited by Socket on Feb 21, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
scripts/gemini_api.py

The code is a functional, straightforward API client for Gemini 3 series with typical CLI usage. It correctly handles text and multimodal workflows, but exposes API keys in URLs, lacks robust retry logic, and has minimal input validation and logging hygiene. While not inherently malicious, the implementation could leak credentials and is sensitive to network/API reliability. An improved version should address authentication handling, resilience, and privacy-conscious logging.

Confidence: 98%
Audit Metadata
Analyzed At
Feb 21, 2026, 03:12 PM
Package URL
pkg:socket/skills-sh/ya-luotao%2Fskills%2Fgemini-api%2F@5460e13585b7e3920951055cf691ffc83556fa68