migration-planning

Warn

Audited by Socket on Sep 28, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The stated purpose is coherent for migration planning, and the local file writes/AST analysis are proportionate. The main risk is transitive trust: this skill depends on and tells the agent/user to install another skill, then executes that sibling skill's setup script and code. With no evidence here of exfiltration or mismatched data flows, this is better classified as medium-risk trust expansion rather than malware.

Confidence: 90%Severity: 52%
Audit Metadata
Analyzed At
Sep 28, 2026, 02:00 PM
Package URL
pkg:socket/skills-sh/blazity%2Fnext-migration-skills%2Fmigration-planning%2F@2cf8dc344e515b2c071a059c0838e5e727d767872b82d183fbddf5ce6b95f021