proposal-draft
Warn
Audited by Socket on Jul 1, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill’s proposal-drafting purpose broadly matches its capabilities, but it relies on Composio as an intermediary for both tool execution and credentialed access rather than using official vendor APIs directly. Because the dependency is same-org and documented, this is not strong evidence of malware, but the third-party credential/data routing and transitive trust in the Composio CLI raise medium security concerns.
Confidence: 84%Severity: 58%
Audit Metadata