gamma-migration-deep-dive
Audited by Socket on Mar 12, 2026
1 alert found:
Obfuscated FileThe Gamma migration deep-dive skill presents a coherent, purpose-aligned workflow: inventory, migrate, validate, and rollback with Gamma as the central integration point. Data flows are well-contained within user-controlled sources and Gamma APIs, with standard credential handling via environment variables. There are no evident untrusted download-execute patterns, no leakage to unknown third-party endpoints, and the access level (reading files, using an API key, and calling Gamma/Drive APIs) is proportionate to the stated migration purpose. Minor concerns include ensuring secure handling of local inventories and appropriate sandboxing for API keys, and verifying that any automated installation of dependencies uses official registries with proper integrity checks. Overall, the risk posture is low to moderate (securityRisk ~0.35), with no malware indicators observed. The footprint is appropriate for a migration tooling scenario.