Shortcut Automation
Warn
Audited by Socket on Oct 4, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill’s capabilities fit Shortcut automation, but trust is weakened by routing auth and all API actions through an external MCP provider, and the hard-coded rube.app endpoint appears stale/deprecated relative to current Composio documentation. This looks more like a third-party hosted integration with medium trust and data-handling risk than outright malicious behavior.
Confidence: 87%Severity: 61%
Audit Metadata