Harvest Automation
Warn
Audited by Socket on Oct 4, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s capabilities fit Harvest automation, and there is no malware-like installer or overt exfiltration. However, it routes Harvest access through third-party Composio/Rube infrastructure and the documented Rube MCP endpoint appears legacy/shut down, making the setup internally inconsistent and increasing trust risk.
Confidence: 89%Severity: 52%
Audit Metadata