Gong Automation

Warn

Audited by Socket on Oct 4, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's purpose matches Gong automation, but its actual data flow relies on a third-party Composio/Rube MCP gateway and managed auth rather than a direct Gong integration. That makes the footprint broader than necessary for sensitive transcripts, analytics, and media URLs, and the use of a discontinued legacy endpoint further reduces trust.

Confidence: 89%Severity: 64%
Audit Metadata
Analyzed At
Oct 4, 2026, 02:15 AM
Package URL
pkg:socket/skills-sh/composiohq%2Fawesome-claude-skills%2Fgong-automation%2F@ff3133712bfbf57de4209132d086973d80aabc08