skills/composio-community/support-skills/refund-processor/Socket

refund-processor

Warn

Audited by Socket on Jul 1, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill’s business purpose is coherent, but it routes sensitive CRM/support data and auth through the third-party Composio CLI/service and may introduce transitive skill installation. This is not confirmed malware, but the trust boundary is broader than a simple refund-preparation helper and warrants medium risk.

Confidence: 83%Severity: 58%

Audit Metadata

Analyzed At

Jul 1, 2026, 08:14 PM

Package URL

pkg:socket/skills-sh/composio-community%2Fsupport-skills%2Frefund-processor%2F@4d856695545ad09f275ac2f43a8d3cc30f752a1f70648cc03a863be566e383c7