amplitude-automation

SUSPICIOUS. The skill’s Amplitude capabilities are coherent, and the scanner’s command-injection hits are false positives from markdown. Risk comes from relying on a third-party MCP endpoint tied to a discontinued Rube service, plus routing Amplitude authentication and data through Composio/Rube with setup claims that do not fully match current official docs.