gpc-monetization
Warn
Audited by Socket on Mar 19, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the skill’s purpose aligns with Google Play monetization, but its core dependency is an unverified `gpc` CLI not confirmed to be Google-official. Because sensitive billing operations and authenticated state flow through an opaque binary with undisclosed network behavior, the install trust and data-flow integrity are not sufficient for a benign classification.
Confidence: 87%Severity: 82%
Audit Metadata