migrate-slack-agents

Warn

Audited by Socket on Aug 30, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the migration purpose mostly matches the required Slack/DB capabilities, and the direct Slack path looks proportionate. The main risk is transitive trust: this skill fetches and applies additional remote skills from an unpinned Git branch, plus an under-specified managed broker path that may intermediate credentials or install authority. Not confirmed malware, but medium security risk for a high-impact migration skill.

Confidence: 88%Severity: 56%
Audit Metadata
Analyzed At
Aug 30, 2026, 02:01 AM
Package URL
pkg:socket/skills-sh/nanocoai%2Fnanoclaw%2Fmigrate-slack-agents%2F@4639d8b944cd6ad2a24fddf26798f78f8c1a9c98e8572e19712d6b74b8b25c0b
Security Audit — socket — migrate-slack-agents