Harvest Automation

Warn

Audited by Socket on Oct 4, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s capabilities fit Harvest automation, and there is no malware-like installer or overt exfiltration. However, it routes Harvest access through third-party Composio/Rube infrastructure and the documented Rube MCP endpoint appears legacy/shut down, making the setup internally inconsistent and increasing trust risk.

Confidence: 89%Severity: 52%
Audit Metadata
Analyzed At
Oct 4, 2026, 02:15 AM
Package URL
pkg:socket/skills-sh/composiohq%2Fawesome-claude-skills%2Fharvest-automation%2F@f40d2bcb1e322ccd7d0f9e66ab15056c66cf0099