airtable-automation
Warn
Audited by Socket on Oct 8, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The Airtable capabilities fit the stated purpose, and the referenced toolkit appears to be a real same-org Composio integration. However, the setup instructions are stale or inaccurate: they claim a fixed public Rube MCP endpoint with no keys, while official materials indicate Rube was discontinued and current Composio MCP access is session/header-based. This is not confirmed malware and does not show credential theft patterns, but the install/execution trust and data-flow model are inconsistent enough to warrant caution.
Confidence: 90%Severity: 54%
Audit Metadata