skills/jeremylongshore/tons-of-skills-marketplace/clade-upgrade-migration/Socket

clade-upgrade-migration

Warn

Audited by Socket on Aug 21, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill's purpose and capabilities mostly fit SDK/model migration, and there is no credential harvesting or exfiltration behavior. However, the npm upgrade instruction points to a package name inconsistent with Anthropic's official SDK, creating a nontrivial supply-chain risk that is disproportionate for a migration guide.

Confidence: 92%Severity: 56%

Audit Metadata

Analyzed At

Aug 21, 2026, 01:03 PM

Package URL

pkg:socket/skills-sh/jeremylongshore%2Fclaude-code-plugins-plus-skills%2Fclade-upgrade-migration%2F@0e2db6cf319702573ca447cd7e38dd25a93dc802afef77b553f17874d307c1b7