proposal-draft

Warn

Audited by Socket on Jul 1, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s proposal-drafting purpose broadly matches its capabilities, but it relies on Composio as an intermediary for both tool execution and credentialed access rather than using official vendor APIs directly. Because the dependency is same-org and documented, this is not strong evidence of malware, but the third-party credential/data routing and transitive trust in the Composio CLI raise medium security concerns.

Confidence: 84%Severity: 58%
Audit Metadata
Analyzed At
Jul 1, 2026, 08:15 PM
Package URL
pkg:socket/skills-sh/composio-community%2Fsupport-skills%2Fproposal-draft%2F@ec504b974b759fa861a96d04bee79b9733442c36e95c2164c5614e0dc0584b1b
Security Audit — socket — proposal-draft