odoo-migration-copilot

Warn

Audited by Socket on Jul 31, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

Likely benign migration guidance, but not low-risk: it relies on external MCP tooling and recommends a second skill, creating medium supply-chain and transitive-trust exposure. Purpose and data use are consistent with Odoo upgrade planning, with no clear credential-harvesting or exfiltration behavior in the skill text itself.

Confidence: 85%Severity: 56%
Audit Metadata
Analyzed At
Jul 31, 2026, 03:27 PM
Package URL
pkg:socket/skills-sh/erpipe-org%2Fmcp-odoo%2Fodoo-migration-copilot%2F@ebebcc959eb6edb4deb83806359d905a7171b25114a2bc772276094bbdcad969
Security Audit — socket — odoo-migration-copilot