gamma-upgrade-migration
Warn
Audited by Socket on Mar 13, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the migration purpose is plausible, but the skill’s core package installs are not verified against Gamma’s official docs, which instead document direct API usage. Installing unverified SDK packages and then passing `GAMMA_API_KEY` to them creates a material supply-chain and credential-forwarding risk, even though the rest of the workflow is a normal upgrade guide.
Confidence: 84%Severity: 78%
Audit Metadata