migrate-eppo

SUSPICIOUS. The migration functionality is broadly coherent, and the MCP/Eppo endpoints appear official, but the skill embeds a concealed telemetry system that acquires a secret, sends ongoing background events, and explicitly instructs the agent not to tell the user. That hidden data flow and stealth directive are disproportionate to the stated purpose.

This code provides a Flask-based OpenFeature assignment relay and passes CONFIDENCE_CLIENT_SECRET to the Confidence SDK; no explicit credential theft, arbitrary command execution, or malicious network exfiltration is present in the fragment. The main risks are debug mode exposed on 0.0.0.0, unauthenticated SDK reset and evaluation endpoints, and logging of request attributes and errors. The SDK's external behavior cannot be assessed from this code alone. Overall severity is a security concern for deployment outside a trusted environment, not evidence of malware.