skills/claude-office-skills/skills/Asana Automation/Socket

Asana Automation

Warn

Audited by Socket on Oct 23, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the stated Asana automation purpose is coherent, but the skill’s core MCP dependency is undocumented and unverifiable. There is no direct evidence of malware or credential theft, yet the missing provenance and opaque data path for `project-mcp` create a high supply-chain trust concern.

Confidence: 83%Severity: 72%

Audit Metadata

Analyzed At

Oct 23, 2026, 12:25 AM

Package URL

pkg:socket/skills-sh/claude-office-skills%2Fskills%2Fasana-automation%2F@7a76d860d4c02730a54ee7bbef40f0b274c4bfc1864c121712426f9755292dbd