asana-automation

SUSPICIOUS. The skill’s Asana automation purpose is coherent, and it does not show direct exfiltration, hidden execution, or disproportionate credential access. However, it relies on an external MCP intermediary and points to deprecated Rube infrastructure/tool names that do not match current official Composio documentation, so the install/execution trust story is inconsistent enough to warrant caution.