composio-cli

SUSPICIOUS. The skill's capabilities broadly match its stated purpose as a SaaS automation CLI, and the installer appears to be official Composio infrastructure rather than an unrelated payload. However, it combines remote curl|bash installation, centralized managed auth for many third-party accounts, raw proxying, file upload, and broad real-world action capability across 1000+ apps. This is proportionate to the product category but still medium risk because users must trust Composio as an auth and action intermediary.