Skills
skills/yasserstudio/gpc-skills/gpc-multi-app/Socket

gpc-multi-app

Warn

Audited by Socket on Apr 17, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The skill’s capabilities fit multi-app Google Play management, but it relies on a non-official external CLI with ambiguous provenance and forwards sensitive service-account credentials into that tool. Risk is driven more by supply-chain trust and credential handling than by any mismatch with the stated purpose.

Confidence: 87%Severity: 72%
Audit Metadata
Analyzed At
Apr 17, 2026, 07:48 PM
Package URL
pkg:socket/skills-sh/yasserstudio%2Fgpc-skills%2Fgpc-multi-app%2F@a105962cbd0b7c169e68c20090961df6f018099f