coda-automation

SUSPICIOUS. The skill’s capabilities broadly match Coda automation, but its setup is outdated and internally inconsistent: it references a deprecated Rube endpoint, mismatches current Composio auth/setup guidance, and routes Coda access through a third-party MCP service instead of direct official API use. This is not confirmed malware, but it has medium trust and data-flow risk.