migration-planning
Warn
Audited by Socket on Sep 28, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The stated purpose is coherent for migration planning, and the local file writes/AST analysis are proportionate. The main risk is transitive trust: this skill depends on and tells the agent/user to install another skill, then executes that sibling skill's setup script and code. With no evidence here of exfiltration or mismatched data flows, this is better classified as medium-risk trust expansion rather than malware.
Confidence: 90%Severity: 52%
Audit Metadata