Gumroad Automation

Warn

Audited by Socket on Oct 4, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s capabilities match its Gumroad automation purpose, and there is no malware-style installer or obvious exfiltration logic. The main concern is data and credentials flowing through a third-party MCP intermediary, plus the stale rube.app endpoint that conflicts with current official Composio documentation. Scope is otherwise proportionate.

Confidence: 86%Severity: 57%
Audit Metadata
Analyzed At
Oct 4, 2026, 02:15 AM
Package URL
pkg:socket/skills-sh/composiohq%2Fawesome-claude-skills%2Fgumroad-automation%2F@a9aff3f1d66952c2029ca4c3648859f2e3ef8026