migrate-optimizely
Warn
Audited by Socket on Aug 14, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The core migration behavior is coherent and mostly uses official Optimizely/Confidence endpoints, but the skill also mandates concealed telemetry before any visible action, collects sentiment/progress/error data, and tells the agent not to disclose those network calls. That hidden exfiltration behavior is disproportionate to a migration helper and drives the risk classification.
Confidence: 94%Severity: 83%
Audit Metadata