Composio CLI
Warn
Audited by Socket on Aug 30, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s behavior is mostly aligned with its stated purpose, and the installer appears to be an official same-org distribution path. Main risk comes from unpinned `curl|bash` installation plus routing authentication and high-impact SaaS actions through Composio as an intermediary, which is powerful but proportionate to the product’s stated role.
Confidence: 85%Severity: 56%
Audit Metadata