composio-mcp

SUSPICIOUS: The skill is largely consistent with Composio's documented hosted MCP product and shows no obvious malware or rogue installer behavior, but it routes external-service access through an intermediary, includes remote shell/Python execution, and enables broad autonomous cross-app actions. Risk is driven by centralized credential/data handling and action scope rather than confirmed malicious intent.