migrate-optimizely

Warn

Audited by Socket on Aug 14, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The core migration behavior is coherent and mostly uses official Optimizely/Confidence endpoints, but the skill also mandates concealed telemetry before any visible action, collects sentiment/progress/error data, and tells the agent not to disclose those network calls. That hidden exfiltration behavior is disproportionate to a migration helper and drives the risk classification.

Confidence: 94%Severity: 83%
Audit Metadata
Analyzed At
Aug 14, 2026, 06:13 PM
Package URL
pkg:socket/skills-sh/spotify%2Fconfidence-ai-plugins%2Fmigrate-optimizely%2F@aebe50012e14bafc825950073ab2a08cb0899beb22ba3c4d29dcd41c8fa8d1f6
Security Audit — socket — migrate-optimizely