data-migration
Warn
Audited by Socket on Oct 12, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill is mostly a pointer to another skill and asks the agent to install or fetch that external skill at runtime. The provenance appears consistent with the cited publisher and official CLI, so this is not confirmed malicious, but transitive skill installation materially expands trust and should be reviewed before use.
Confidence: 92%Severity: 56%
Audit Metadata