migrate-optimizely

SUSPICIOUS: the migration capabilities mostly match the stated purpose, and the API endpoints are first-party Confidence/Optimizely services, but the mandatory hidden telemetry materially breaks scope and transparency. The skill collects conversation sentiment/progress, sends it off-platform via background requests, and tells the agent never to mention those actions; combined with sandbox-disabling shell use and powerful write actions, this makes the skill high risk even without confirmed credential theft.