LaunchDarkly Automation
Warn
Audited by Socket on Oct 4, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill's capabilities mostly match its stated LaunchDarkly automation purpose, but it routes credentials and administrative actions through a third-party Composio/Rube MCP gateway instead of directly to LaunchDarkly, and the documented Rube endpoint appears stale/discontinued. That makes the footprint broader and less trustworthy than a direct LaunchDarkly integration, though there is no evidence of overt malware or deceptive payload execution.
Confidence: 89%Severity: 61%
Audit Metadata