Productboard Automation
Warn
Audited by Socket on Oct 4, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill's capabilities fit its Productboard automation purpose, but all actions and OAuth flow are mediated by Composio/Rube instead of going directly to Productboard's official API. That third-party credential and data routing is a meaningful trust and data-flow concern, though not strong evidence of malware.
Confidence: 88%Severity: 56%
Audit Metadata