tdd-migration-pipeline

Warn

Audited by Socket on Sep 18, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the stated purpose is coherent for a migration orchestrator, but the skill expands trust to multiple downstream skills/tools and relies on ambiguous `tldr` provenance plus external CLI usage. Risk is mainly supply-chain and transitive-skill trust, not confirmed malicious behavior.

Confidence: 83%Severity: 58%
Audit Metadata
Analyzed At
Sep 18, 2026, 05:11 PM
Package URL
pkg:socket/skills-sh/parcadei%2Fcontinuous-claude-v3%2Ftdd-migration-pipeline%2F@21a83374082d64e2fbdaa5068cc4b42ab59d6209de520e2360a6b12a465808f5
Security Audit — socket — tdd-migration-pipeline