spring-mvc-to-boot-migrator

Fail

Audited by Socket on Mar 6, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The skill's footprint is coherent with its stated purpose: it automates a controlled, project-scoped migration from Spring MVC to Spring Boot using local scripts and standard build tools, with incremental commits and a summary report. No evidence suggests credential extraction, remote data exfiltration, or autonomous real-world actions. The security posture appears benign to low-risk (benign to suspicious, given the general risk of automated code modification, but no credential exposure or external dependency downloads are evident). Overall assessment: BENIGN, with normal operational risk inherent to automated code transformation tools.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 6, 2026, 10:22 PM
Package URL
pkg:socket/skills-sh/ArabelaTso%2FSkills-4-SE%2Fspring-mvc-to-boot-migrator%2F@3bafdaa8f6cfc84f4d5041402828d7f947519331