migrate-slack-agents
Warn
Audited by Socket on Aug 30, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the migration purpose mostly matches the required Slack/DB capabilities, and the direct Slack path looks proportionate. The main risk is transitive trust: this skill fetches and applies additional remote skills from an unpinned Git branch, plus an under-specified managed broker path that may intermediate credentials or install authority. Not confirmed malware, but medium security risk for a high-impact migration skill.
Confidence: 88%Severity: 56%
Audit Metadata