experience-aura-lwc-migrate

Warn

Audited by Socket on Aug 14, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

BENIGN in purpose and data flow, but elevated to HIGH security risk by the required use of an unverifiable internal dependency. No evidence of credential theft, exfiltration, remote execution, or deceptive behavior; the main concern is supply-chain trust for the private @sfdc-internal/adk-knowledge package.

Confidence: 88%Severity: 72%
Audit Metadata
Analyzed At
Aug 14, 2026, 12:18 PM
Package URL
pkg:socket/skills-sh/forcedotcom%2Fsf-skills%2Fexperience-aura-lwc-migrate%2F@7b801fb4fcad7df8217dd237a8419c39d1b2e3a5b5d5b3f73498756a464beb29
Security Audit — socket — experience-aura-lwc-migrate