gpc-monetization

Warn

Audited by Socket on Mar 19, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s purpose aligns with Google Play monetization, but its core dependency is an unverified `gpc` CLI not confirmed to be Google-official. Because sensitive billing operations and authenticated state flow through an opaque binary with undisclosed network behavior, the install trust and data-flow integrity are not sufficient for a benign classification.

Confidence: 87%Severity: 82%
Audit Metadata
Analyzed At
Mar 19, 2026, 02:45 PM
Package URL
pkg:socket/skills-sh/yasserstudio%2Fgpc-skills%2Fgpc-monetization%2F@55c7c40f8f309de67d8c49ea58ff97c552422adc