migrate
Warn
Audited by Socket on Sep 25, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The core migration behavior is coherent and Playwright CLI usage is official, but the skill is overlaid with unrelated mandatory framework controls and routes execution through an external `rtk` proxy plus auxiliary MCP services. No confirmed credential theft or malicious exfiltration is present, yet the extra intermediary tooling is disproportionate to a straightforward test-migration skill and raises medium trust risk.
Confidence: 86%Severity: 56%
Audit Metadata