SEMrush Automation
Warn
Audited by Socket on Oct 4, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill's SEO capabilities fit its stated purpose, but the trust path is weaker than expected because it routes SEMrush access through a third-party Composio/Rube MCP service and references a legacy endpoint rather than the current official Composio MCP URL. This looks more like outdated/indirect integration risk than malware, but the mediated auth/data flow makes it medium risk.
Confidence: 88%Severity: 56%
Audit Metadata