Shortcut Automation

Warn

Audited by Socket on Oct 4, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s capabilities fit Shortcut automation, but trust is weakened by routing auth and all API actions through an external MCP provider, and the hard-coded rube.app endpoint appears stale/deprecated relative to current Composio documentation. This looks more like a third-party hosted integration with medium trust and data-handling risk than outright malicious behavior.

Confidence: 87%Severity: 61%
Audit Metadata
Analyzed At
Oct 4, 2026, 02:16 AM
Package URL
pkg:socket/skills-sh/composiohq%2Fawesome-claude-skills%2Fshortcut-automation%2F@282f3565855177118bb5ce9237b59d9bebff5596